Avoid ambiguity by pinning down the vendor part.
Link:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:openssl:openssl
Signed-off-by: Alexander Dahl <[email protected]>
---
rules/openssl.make | 1 +
1 file changed, 1 insertion(+)
diff --git a/rules/openssl.make b/rules/openssl.make
index 53d3ee5f3..2c60f127a 100644
--- a/rules/openssl.make
+++ b/rules/openssl.make
@@ -29,6 +29,7 @@ OPENSSL_DIR := $(BUILDDIR)/$(OPENSSL)
OPENSSL_LICENSE := Apache-2.0
OPENSSL_LICENSE_FILES := \
file://LICENSE.txt;md5=c75985e733726beaba57bc5253e96d04
+OPENSSL_CVE_PRODUCT := openssl:openssl
# ----------------------------------------------------------------------------
# Prepare
--
2.47.3
