mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-01 21:23:51 -09:00
package/libgit2: add CPE vendor
The CPE "cpe:2.3:a:libgit2:libgit2:*:*:*:*:*:*:*:*" is valid for this package. The previous CPE hasn't been used since 2016 while the new one has 10 new CVEs assigned to it. See the GHSA [1] and the associated CVE [2]. [1] https://github.com/libgit2/libgit2/security/advisories/GHSA-j2v7-4f6v-gpg8 [2] https://nvd.nist.gov/vuln/detail/cve-2024-24577 Signed-off-by: Thomas Perale <thomas.perale@mind.be> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
committed by
Peter Korsgaard
parent
2c3bc6609b
commit
e166708e1e
@@ -15,7 +15,7 @@ LIBGIT2_LICENSE = \
|
||||
BSD-2-Clause (basename_r), \
|
||||
LGPL-2.1+ (libxdiff)
|
||||
LIBGIT2_LICENSE_FILES = COPYING
|
||||
LIBGIT2_CPE_ID_VALID = YES
|
||||
LIBGIT2_CPE_ID_VENDOR = libgit2
|
||||
LIBGIT2_INSTALL_STAGING = YES
|
||||
|
||||
LIBGIT2_CONF_OPTS = \
|
||||
|
||||
Reference in New Issue
Block a user