From ef5293307478bd9487c890facbb8de85240d4156 Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Tue, 20 Jan 2026 09:24:05 +0100 Subject: [PATCH] package/libucl: add CPE The CPE `vstakhov:libucl` is a valid CPE for the package libucl. See the latest CVE: CVE-2025-6499 [1] that reference the upstream repository. [1] https://nvd.nist.gov/vuln/detail/CVE-2025-6499 Signed-off-by: Thomas Perale Signed-off-by: Julien Olivain --- package/libucl/libucl.mk | 2 ++ 1 file changed, 2 insertions(+) diff --git a/package/libucl/libucl.mk b/package/libucl/libucl.mk index bf5e368f2b..7b0e5b8e8c 100644 --- a/package/libucl/libucl.mk +++ b/package/libucl/libucl.mk @@ -12,6 +12,8 @@ LIBUCL_LICENSE = BSD-2-Clause LIBUCL_LICENSE_FILES = COPYING LIBUCL_DEPENDENCIES = host-pkgconf +LIBUCL_CPE_ID_VENDOR = vstakhov + ifeq ($(BR2_PACKAGE_LIBCURL),y) LIBUCL_DEPENDENCIES += libcurl LIBUCL_CONF_OPTS += --enable-urls