From f85f4793ffa286815d3b04dbf38867b918c9ace8 Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Mon, 6 Jul 2026 12:02:59 +0200 Subject: [PATCH] package/ogre: add CPE Vulnerabilities such as [1][2] are assigned to the ogre package with the cpe: ogre3d:ogre. To correctly match against those vulnerabilities the CPE_ID_VERSION uses the version without the 'v' prepended. [1] https://nvd.nist.gov/vuln/detail/CVE-2025-11014 [2] https://nvd.nist.gov/vuln/detail/CVE-2025-11017 Signed-off-by: Thomas Perale Signed-off-by: Julien Olivain (cherry picked from commit fe1f45c1330f5975722c416e4d1c518471e49307) Signed-off-by: Thomas Perale --- package/ogre/ogre.mk | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/package/ogre/ogre.mk b/package/ogre/ogre.mk index f3e3fc1d8e..4f19b285be 100644 --- a/package/ogre/ogre.mk +++ b/package/ogre/ogre.mk @@ -4,12 +4,15 @@ # ################################################################################ -OGRE_VERSION = v14.4.1 +OGRE_VERSION_UPSTREAM = 14.4.1 +OGRE_VERSION = v$(OGRE_VERSION_UPSTREAM) OGRE_SITE = https://github.com/OGRECave/ogre OGRE_SITE_METHOD = git OGRE_LICENSE = MIT (main library, DeferredShadingMedia samples), Public Domain (samples and plugins) OGRE_LICENSE_FILES = LICENSE OGRE_INSTALL_STAGING = YES +OGRE_CPE_ID_VENDOR = ogre3d +OGRE_CPE_ID_VERSION = $(OGRE_VERSION_UPSTREAM) # Download with imgui submodule (https://github.com/ocornut/imgui OGRE_GIT_SUBMODULES = YES