From b61a268160fa061c85a4641a29b75783835f55d2 Mon Sep 17 00:00:00 2001 From: Himanshu Jadon Date: Tue, 2 Jun 2026 06:31:14 -0700 Subject: [PATCH] apr-util: Add CVE_PRODUCT to support product name apr-util is tracked in NVD under apache:apr-util, while a smaller set of newer CVEs also appears under apache:portable_runtime_utility. Set CVE_PRODUCT accordingly so cve-check can cover both the historical and current NVD product identities used for APR-util. (From OE-Core rev: 3a157840148e14ec9019a008ab94e7f708baac05) Signed-off-by: Himanshu Jadon Signed-off-by: Mathieu Dubois-Briand (cherry picked from commit 927b505c982ed7443aed348ca54b0073ac63d938) Signed-off-by: Himanshu Jadon Signed-off-by: Yoann Congal Signed-off-by: Paul Barker --- meta/recipes-support/apr/apr-util_1.6.3.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/recipes-support/apr/apr-util_1.6.3.bb b/meta/recipes-support/apr/apr-util_1.6.3.bb index 1371e262dd..3a5f52d250 100644 --- a/meta/recipes-support/apr/apr-util_1.6.3.bb +++ b/meta/recipes-support/apr/apr-util_1.6.3.bb @@ -95,3 +95,6 @@ do_install_ptest() { cp -r ${B}/test/$i $t; \ done } + +# Add CVE_PRODUCT to match the NVD CPE product name +CVE_PRODUCT = "apache:apr-util apache:portable_runtime_utility"