From fe530d55ef61d61e8620c45c96c0abe009d595b2 Mon Sep 17 00:00:00 2001 From: Devansh Patel Date: Wed, 26 Aug 2026 00:53:47 -0700 Subject: [PATCH] ldns: correct CVE_PRODUCT mapping The default product-only mapping generates a vendor-wildcard CPE. nlnetlabs:ldns is the active NVD dictionary CPE and configuration identity for the packaged NLnet Labs source. This changes the generated product identity to an exact CPE, but the frozen sbom-cve-check database leaves the eight-entry CVE report unchanged, with no current CVE delta. Signed-off-by: Devansh Patel Signed-off-by: Khem Raj --- meta-oe/recipes-devtools/ldns/ldns_1.9.2.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-oe/recipes-devtools/ldns/ldns_1.9.2.bb b/meta-oe/recipes-devtools/ldns/ldns_1.9.2.bb index 8b3b9bd9de..6e50cc2b1e 100644 --- a/meta-oe/recipes-devtools/ldns/ldns_1.9.2.bb +++ b/meta-oe/recipes-devtools/ldns/ldns_1.9.2.bb @@ -6,6 +6,8 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=34330f15b2b4abbbaaa7623f79a6a019" SRC_URI = "https://www.nlnetlabs.nl/downloads/ldns/ldns-${PV}.tar.gz" SRC_URI[sha256sum] = "b524fa21994b6e834200ceb8c27f1b84bda5982fe35706f058196c079db94d5d" +CVE_PRODUCT = "nlnetlabs:ldns" + DEPENDS = "openssl" inherit autotools-brokensep