From 98ef053c24c4a8c533fd41c5e23f335353801613 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bj=C3=B8rn=20Damstedt=20Rasmussen?= Date: Sat, 3 Oct 2026 20:04:59 +0200 Subject: [PATCH] package/openjdk-bin: add proper CPE ID information MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The CPE ID on openjdk version 21.0.2 in NVD: https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:oracle:openjdk:21.0.2:*:*:*:*:*:*:* HOST_OPENJDK_BIN_CPE_ID_VERSION has be overwritten to match NVD's versioning. Signed-off-by: Bjørn Damstedt Rasmussen Signed-off-by: Thomas Petazzoni (cherry picked from commit b174bfd0b29b8ad81b4e583c022aa6449a6f237c) Signed-off-by: Raphaël Mélotte --- package/openjdk-bin/openjdk-bin.mk | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/package/openjdk-bin/openjdk-bin.mk b/package/openjdk-bin/openjdk-bin.mk index 5f1922dea5..4a21cbb460 100644 --- a/package/openjdk-bin/openjdk-bin.mk +++ b/package/openjdk-bin/openjdk-bin.mk @@ -29,6 +29,11 @@ HOST_OPENJDK_BIN_VERSION = $(HOST_OPENJDK_BIN_VERSION_MAJOR).$(HOST_OPENJDK_BIN_ HOST_OPENJDK_BIN_SOURCE = OpenJDK$(HOST_OPENJDK_BIN_VERSION_MAJOR)U-jdk_$(HOST_OPENJDK_BIN_DOWNLOAD_ARCH_NAME)_linux_hotspot_$(HOST_OPENJDK_BIN_VERSION).tar.gz HOST_OPENJDK_BIN_SITE = https://github.com/adoptium/temurin$(HOST_OPENJDK_BIN_VERSION_MAJOR)-binaries/releases/download/jdk-$(subst _,%2B,$(HOST_OPENJDK_BIN_VERSION)) +# Override automatic CPE ID because '_' in $(HOST_OPENJDK_BIN_VERSION) is not used by NVD +HOST_OPENJDK_BIN_CPE_ID_VENDOR = oracle +HOST_OPENJDK_BIN_CPE_ID_PRODUCT = openjdk +HOST_OPENJDK_BIN_CPE_ID_VERSION = $(HOST_OPENJDK_BIN_VERSION_MAJOR).$(HOST_OPENJDK_BIN_VERSION_MINOR) + HOST_OPENJDK_BIN_LICENSE = GPL-2.0+ with exception HOST_OPENJDK_BIN_LICENSE_FILES = legal/java.prefs/LICENSE legal/java.prefs/ASSEMBLY_EXCEPTION