Add exact CPE name (from NVD database) in CVE_PRODUCT in order to ensure
CVE filtering and not be disturb by futur potential false-positive CVEs.

Signed-off-by: Benjamin Bouvier <[email protected]>
---
 .../recipes-support/bridge-utils/bridge-utils_1.7.1.bb          | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta-networking/recipes-support/bridge-utils/bridge-utils_1.7.1.bb 
b/meta-networking/recipes-support/bridge-utils/bridge-utils_1.7.1.bb
index cf0fc1c33d..66c8f2d053 100644
--- a/meta-networking/recipes-support/bridge-utils/bridge-utils_1.7.1.bb
+++ b/meta-networking/recipes-support/bridge-utils/bridge-utils_1.7.1.bb
@@ -19,6 +19,8 @@ S = "${WORKDIR}/git"
 
 DEPENDS = "sysfsutils"
 
+CVE_PRODUCT = "kernel:bridge-utils"
+
 inherit autotools-brokensep update-alternatives
 
 ALTERNATIVE:${PN} = "brctl"
-- 
2.34.1

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#114309): 
https://lists.openembedded.org/g/openembedded-devel/message/114309
Mute This Topic: https://lists.openembedded.org/mt/110094275/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to