From 7fa4b3c8b4eb62fb0e997cb3cde1d43756719d5c Mon Sep 17 00:00:00 2001 From: Sebastien Guillaume Date: Fri, 12 Jun 2026 12:16:02 +0000 Subject: [PATCH] package/m4: add CPE The resulting CPE ID is: cpe:2.3:a:gnu:m4:1.4.21:-:*:*:*:*:*:* The vendor and product are valid, see e.g. https://nvd.nist.gov/vuln/detail/CVE-2008-1687 Signed-off-by: Sebastien Guillaume Signed-off-by: Arnout Vandecappelle --- package/m4/m4.mk | 1 + 1 file changed, 1 insertion(+) diff --git a/package/m4/m4.mk b/package/m4/m4.mk index d498754b35..da739a5f0c 100644 --- a/package/m4/m4.mk +++ b/package/m4/m4.mk @@ -9,5 +9,6 @@ M4_SOURCE = m4-$(M4_VERSION).tar.xz M4_SITE = $(BR2_GNU_MIRROR)/m4 M4_LICENSE = GPL-3.0+ M4_LICENSE_FILES = COPYING +M4_CPE_ID_VENDOR = gnu $(eval $(host-autotools-package))