mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-01 21:23:51 -09:00
package/libgit2: add CPE vendor
The CPE "cpe:2.3:a:libgit2:libgit2:*:*:*:*:*:*:*:*" is valid for this
package.
The previous CPE hasn't been used since 2016 while the new one has 10
new CVEs assigned to it.
See the GHSA [1] and the associated CVE [2].
[1] https://github.com/libgit2/libgit2/security/advisories/GHSA-j2v7-4f6v-gpg8
[2] https://nvd.nist.gov/vuln/detail/cve-2024-24577
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit e166708e1e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
This commit is contained in:
@@ -15,7 +15,7 @@ LIBGIT2_LICENSE = \
|
||||
BSD-2-Clause (basename_r), \
|
||||
LGPL-2.1+ (libxdiff)
|
||||
LIBGIT2_LICENSE_FILES = COPYING
|
||||
LIBGIT2_CPE_ID_VALID = YES
|
||||
LIBGIT2_CPE_ID_VENDOR = libgit2
|
||||
LIBGIT2_INSTALL_STAGING = YES
|
||||
|
||||
LIBGIT2_CONF_OPTS = \
|
||||
|
||||
Reference in New Issue
Block a user