From 9e770d6c1d465dc4c5c129a559ee5203a90d8f0f Mon Sep 17 00:00:00 2001 From: Fabrice Fontaine Date: Fri, 2 Feb 2024 20:08:34 +0100 Subject: [PATCH] utils/squashfs-tools: fix PKG_CPE_ID There is not a single CVE linked to phillip_lougher:squashfs so use squashfs-tools_project:squashfs-tools instead: https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:squashfs-tools_project:squashfs-tools Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage) Signed-off-by: Fabrice Fontaine --- utils/squashfs-tools/Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/utils/squashfs-tools/Makefile b/utils/squashfs-tools/Makefile index 04628bc35f..8a8b72b2f0 100644 --- a/utils/squashfs-tools/Makefile +++ b/utils/squashfs-tools/Makefile @@ -14,7 +14,7 @@ PKG_RELEASE:=1 PKG_LICENSE:=GPL-2.0-only PKG_LICENSE_FILES:=COPYING PKG_MAINTAINER:=Alexandru Ardelean -PKG_CPE_ID:=cpe:/a:phillip_lougher:squashfs +PKG_CPE_ID:=cpe:/a:squashfs-tools_project:squashfs-tools PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz PKG_SOURCE_URL:=https://codeload.github.com/plougher/squashfs-tools/tar.gz/${PKG_VERSION}?