Pin down the vendor and split up the version.  Correctly matches now.

Link: 
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:sudo_project:sudo
Signed-off-by: Alexander Dahl <[email protected]>
---
 rules/sudo.make | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/rules/sudo.make b/rules/sudo.make
index 05d872487..3ba1ed570 100644
--- a/rules/sudo.make
+++ b/rules/sudo.make
@@ -26,6 +26,8 @@ SUDO_SOURCE   := $(SRCDIR)/$(SUDO).$(SUDO_SUFFIX)
 SUDO_DIR       := $(BUILDDIR)/$(SUDO)
 SUDO_LICENSE   := ISC AND BSD-3-Clause AND BSD-2-Clause-NetBSD AND Zlib
 SUDO_LICENSE_FILES := file://LICENSE.md;md5=2841c822e587db145364ca95e9be2ffa
+SUDO_CVE_PRODUCT := sudo_project:sudo
+SUDO_CVE_VERSION := $(subst p,:p,$(SUDO_VERSION))
 
 # ----------------------------------------------------------------------------
 # Prepare
-- 
2.47.3


Reply via email to