From 53bb7eafb2b3cd142b1ebba755ba06ba6084a8ae Mon Sep 17 00:00:00 2001 From: Heiko Stuebner Date: Thu, 26 Mar 2026 11:10:33 +0100 Subject: [PATCH] package/arm-trusted-firmware: add ARM_TRUSTED_FIRMWARE_CPE_ID_* Trusted-Firmware has been using a number of CPE identifiers in the past but especially after v2.4, the correct identifier would be similar to cpe:2.3:o:arm:trusted_firmware-a:2.12:rc0:*:*:-:*:*:* https://nvd.nist.gov/products/cpe/detail/65DEC230-1CD5-40DB-903A-22537D1E44FE Add the relevant CPE fields to the trusted-firmware package. Signed-off-by: Heiko Stuebner Signed-off-by: Arnout Vandecappelle --- boot/arm-trusted-firmware/arm-trusted-firmware.mk | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/boot/arm-trusted-firmware/arm-trusted-firmware.mk b/boot/arm-trusted-firmware/arm-trusted-firmware.mk index b81ce0d827..c3c4a581da 100644 --- a/boot/arm-trusted-firmware/arm-trusted-firmware.mk +++ b/boot/arm-trusted-firmware/arm-trusted-firmware.mk @@ -5,6 +5,10 @@ ################################################################################ ARM_TRUSTED_FIRMWARE_VERSION = $(call qstrip,$(BR2_TARGET_ARM_TRUSTED_FIRMWARE_VERSION)) +ARM_TRUSTED_FIRMWARE_CPE_ID_PREFIX = cpe:2.3:o +ARM_TRUSTED_FIRMWARE_CPE_ID_VENDOR = arm +ARM_TRUSTED_FIRMWARE_CPE_ID_PRODUCT = trusted_firmware-a +ARM_TRUSTED_FIRMWARE_CPE_ID_VERSION = $(subst v,,$(subst lts-,,$(ARM_TRUSTED_FIRMWARE_VERSION))) ifeq ($(BR2_TARGET_ARM_TRUSTED_FIRMWARE_CUSTOM_TARBALL),y) # Handle custom ATF tarballs as specified by the configuration