From 88b575a9206b009ddb584ae3ef65947dcaf86857 Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Fri, 29 May 2026 11:45:09 +0200 Subject: [PATCH] package/hiredis: add CPE vendor The CPE "cpe:2.3:a:redis:hiredis:*:*:*:*:*:*:*:*" is valid for this package. See the GHSA [1] and the associated CVE [2]. [1] https://github.com/redis/hiredis/security/advisories/GHSA-hfm9-39pp-55p2 [2] https://nvd.nist.gov/vuln/detail/CVE-2021-32765 Signed-off-by: Thomas Perale Signed-off-by: Peter Korsgaard --- package/hiredis/hiredis.mk | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package/hiredis/hiredis.mk b/package/hiredis/hiredis.mk index f7acb2f131..33a87e7780 100644 --- a/package/hiredis/hiredis.mk +++ b/package/hiredis/hiredis.mk @@ -9,7 +9,7 @@ HIREDIS_VERSION = $(HIREDIS_VERSION_MAJOR).0 HIREDIS_SITE = $(call github,redis,hiredis,v$(HIREDIS_VERSION)) HIREDIS_LICENSE = BSD-3-Clause HIREDIS_LICENSE_FILES = COPYING -HIREDIS_CPE_ID_VENDOR = redislabs +HIREDIS_CPE_ID_VENDOR = redis HIREDIS_INSTALL_STAGING = YES # The package is a dependency to ccache so ccache cannot be a dependency