utils/squashfs-tools: fix PKG_CPE_ID 23262/head
authorFabrice Fontaine <fontaine.fabrice@gmail.com>
Fri, 2 Feb 2024 19:08:34 +0000 (20:08 +0100)
committerFabrice Fontaine <fontaine.fabrice@gmail.com>
Fri, 2 Feb 2024 21:36:42 +0000 (22:36 +0100)
There is not a single CVE linked to phillip_lougher:squashfs so use
squashfs-tools_project:squashfs-tools instead:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:squashfs-tools_project:squashfs-tools

Fixes: 299e5b0a9bce19d6e96cb9ff217028b36ee2dd36 (treewide: add PKG_CPE_ID for better cvescanner coverage)
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
utils/squashfs-tools/Makefile

index 04628bc35fd419b4a37257203a419e78538ed897..8a8b72b2f0477b78073f52652befb0d5856a2324 100644 (file)
@@ -14,7 +14,7 @@ PKG_RELEASE:=1
 PKG_LICENSE:=GPL-2.0-only
 PKG_LICENSE_FILES:=COPYING
 PKG_MAINTAINER:=Alexandru Ardelean <ardeleanalex@gmail.com>
-PKG_CPE_ID:=cpe:/a:phillip_lougher:squashfs
+PKG_CPE_ID:=cpe:/a:squashfs-tools_project:squashfs-tools
 
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
 PKG_SOURCE_URL:=https://codeload.github.com/plougher/squashfs-tools/tar.gz/${PKG_VERSION}?