From 417c6b2a11f1a137d0407ba37e49d4ecff91373e Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Tue, 20 Jan 2026 09:24:03 +0100 Subject: [PATCH] package/easy-rsa: add CPE The CPE `openvpn:easy-rsa` is valid for the EasyRsa package. The last CVE is CVE-2024-13454 [1] that is reference in the upstream bug tracker [2]. [1] https://nvd.nist.gov/vuln/detail/CVE-2024-13454 [2] https://github.com/OpenVPN/easy-rsa/issues/1122 Signed-off-by: Thomas Perale Signed-off-by: Julien Olivain (cherry picked from commit 7bcad09c029bd66cf7ae819e7a2a332025cb7837) Signed-off-by: Thomas Perale --- package/easy-rsa/easy-rsa.mk | 2 ++ 1 file changed, 2 insertions(+) diff --git a/package/easy-rsa/easy-rsa.mk b/package/easy-rsa/easy-rsa.mk index 7266943f5b..2d70dfd05f 100644 --- a/package/easy-rsa/easy-rsa.mk +++ b/package/easy-rsa/easy-rsa.mk @@ -10,6 +10,8 @@ EASY_RSA_SITE = https://github.com/OpenVPN/easy-rsa/releases/download/v$(EASY_RS EASY_RSA_LICENSE = GPL-2.0 EASY_RSA_LICENSE_FILES = COPYING.md gpl-2.0.txt +EASY_RSA_CPE_ID_VENDOR = openvpn + # shell script, so no build step define EASY_RSA_INSTALL_TARGET_CMDS