package/libgit2: add CPE vendor

The CPE "cpe:2.3:a:libgit2:libgit2:*:*:*:*:*:*:*:*" is valid for this
package.

The previous CPE hasn't been used since 2016 while the new one has 10
new CVEs assigned to it.

See the GHSA [1] and the associated CVE [2].

[1] https://github.com/libgit2/libgit2/security/advisories/GHSA-j2v7-4f6v-gpg8
[2] https://nvd.nist.gov/vuln/detail/cve-2024-24577

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit e166708e1e)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
This commit is contained in:
Thomas Perale
2026-05-29 11:45:13 +02:00
parent ed8b0b51c8
commit c4a08102a4

View File

@@ -15,7 +15,7 @@ LIBGIT2_LICENSE = \
BSD-2-Clause (basename_r), \
LGPL-2.1+ (libxdiff)
LIBGIT2_LICENSE_FILES = COPYING
LIBGIT2_CPE_ID_VALID = YES
LIBGIT2_CPE_ID_VENDOR = libgit2
LIBGIT2_INSTALL_STAGING = YES
LIBGIT2_CONF_OPTS = \