From 48a296c33c46e5448c120789a7bc8f8de4b028d9 Mon Sep 17 00:00:00 2001 From: Sebastien Guillaume Date: Fri, 12 Jun 2026 12:16:04 +0000 Subject: [PATCH] package/nano: add CPE MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The resulting CPE ID is: cpe:2.3:a:gnu:nano:9.2:-:*:*:*:*:*:* The vendor and product are valid, see e.g. https://nvd.nist.gov/vuln/detail/CVE-2026-6843 Signed-off-by: Sebastien Guillaume Signed-off-by: Arnout Vandecappelle (cherry picked from commit a07499c8f1cb41a021def4752bac0429bc879da2) Signed-off-by: Raphaël Mélotte --- package/nano/nano.mk | 2 ++ 1 file changed, 2 insertions(+) diff --git a/package/nano/nano.mk b/package/nano/nano.mk index a3e019d5e5..16ed5d7137 100644 --- a/package/nano/nano.mk +++ b/package/nano/nano.mk @@ -12,6 +12,8 @@ NANO_LICENSE = GPL-3.0+ NANO_LICENSE_FILES = COPYING NANO_DEPENDENCIES = ncurses +NANO_CPE_ID_VENDOR = gnu + ifeq ($(BR2_PACKAGE_NCURSES_WCHAR),y) NANO_CONF_ENV += ac_cv_prog_NCURSESW_CONFIG=$(STAGING_DIR)/usr/bin/$(NCURSES_CONFIG_SCRIPTS) else