[Buildroot] [git commit branch/2025.02.x] boot/arm-trusted-firmware: fix CPE
Titouan Christophe via buildroot <[email protected]>
| Newsgroups | net.busybox.buildroot |
|---|---|
| Message-ID | <[email protected]> |
commit: https://gitlab.com/buildroot.org/buildroot/-/commit/a0ebb8483fbebb47ef576c77c1cf8e70e7372697 branch: https://gitlab.com/buildroot.org/buildroot/-/tree/2025.02.x A new (and hopefully definitive) CPE is to be used for TF-A: cpe:2.3:o:trustedfirmware:trusted_firmware-a: as reported in TF-A directly[1]. NVD correctly reports[2] the new CPE deprecates the "old" one Buildroot was using. CVEs for projects under the TrustedFirmware umbrella are now seemingly handled under the CPE vendor "trustedfirmware". [1] https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/efd7b189fa259c349699957462c7b52bf640e27b%5E%21/ [2] https://nvd.nist.gov/products/cpe/detail/2E1BD3E8-DF65-42E3-A0BA-747137D6DEF2 Signed-off-by: Quentin Schulz <[email protected]> Signed-off-by: Julien Olivain <[email protected]> (cherry picked from commit b7cf802aceba9ee2bd3064230f1bcbc86a58f926) Signed-off-by: Titouan Christophe <[email protected]> --- boot/arm-trusted-firmware/arm-trusted-firmware.mk | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/boot/arm-trusted-firmware/arm-trusted-firmware.mk b/boot/arm-trusted-firmware/arm-trusted-firmware.mk index 87c16b6073..ba9a10807a 100644 --- a/boot/arm-trusted-firmware/arm-trusted-firmware.mk +++ b/boot/arm-trusted-firmware/arm-trusted-firmware.mk @@ -6,7 +6,7 @@ ARM_TRUSTED_FIRMWARE_VERSION = $(call qstrip,$(BR2_TARGET_ARM_TRUSTED_FIRMWARE_VERSION)) ARM_TRUSTED_FIRMWARE_CPE_ID_PREFIX = cpe:2.3:o -ARM_TRUSTED_FIRMWARE_CPE_ID_VENDOR = arm +ARM_TRUSTED_FIRMWARE_CPE_ID_VENDOR = trustedfirmware ARM_TRUSTED_FIRMWARE_CPE_ID_PRODUCT = trusted_firmware-a ARM_TRUSTED_FIRMWARE_CPE_ID_VERSION = $(patsubst v%,%,$(patsubst lts-%,%,$(ARM_TRUSTED_FIRMWARE_VERSION))) _______________________________________________ buildroot mailing list [email protected] https://lists.buildroot.org/mailman/listinfo/buildroot