Thanks, applied as 5a64d25df18a529b74922a2afd3d5376bc3dac25. Michael
[sent from post-receive hook] On Mon, 21 Sep 2026 08:38:35 +0200, Alexander Dahl <[email protected]> wrote: > Upstream author Niels Lohmann just calls the project 'json', which makes > it somewhat hard for packaging. We obviously need to explicitly set > vendor and product to the ones used in the CPE database in this case. > > Link: > https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:nlohmann:json > Signed-off-by: Alexander Dahl <[email protected]> > Message-Id: <[email protected]> > Signed-off-by: Michael Olbrich <[email protected]> > > diff --git a/rules/nlohmann-json.make b/rules/nlohmann-json.make > index 28693d680547..29bd579f983e 100644 > --- a/rules/nlohmann-json.make > +++ b/rules/nlohmann-json.make > @@ -23,6 +23,7 @@ NLOHMANN_JSON_SOURCE := > $(SRCDIR)/$(NLOHMANN_JSON).$(NLOHMANN_JSON_SUFFIX) > NLOHMANN_JSON_DIR := $(BUILDDIR)/$(NLOHMANN_JSON) > NLOHMANN_JSON_LICENSE := MIT > NLOHMANN_JSON_LICENSE_FILES := > file://LICENSE.MIT;md5=3b489645de9825cca5beeb9a7e18b6eb > +NLOHMANN_JSON_CVE_PRODUCT := nlohmann:json > > # > ---------------------------------------------------------------------------- > # Prepare
