boot/arm-trusted-firmware: fix CPE

A new (and hopefully definitive) CPE is to be used for TF-A:

cpe:2.3:o:trustedfirmware:trusted_firmware-a:

as reported in TF-A directly[1]. NVD correctly reports[2] the new CPE
deprecates the "old" one Buildroot was using.

CVEs for projects under the TrustedFirmware umbrella are now seemingly
handled under the CPE vendor "trustedfirmware".

[1] efd7b189fa%5E%21/
[2] https://nvd.nist.gov/products/cpe/detail/2E1BD3E8-DF65-42E3-A0BA-747137D6DEF2
Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
Quentin Schulz
2026-06-25 17:37:44 +02:00
committed by Julien Olivain
parent 2456e44d67
commit b7cf802ace

View File

@@ -6,7 +6,7 @@
ARM_TRUSTED_FIRMWARE_VERSION = $(call qstrip,$(BR2_TARGET_ARM_TRUSTED_FIRMWARE_VERSION))
ARM_TRUSTED_FIRMWARE_CPE_ID_PREFIX = cpe:2.3:o
ARM_TRUSTED_FIRMWARE_CPE_ID_VENDOR = arm
ARM_TRUSTED_FIRMWARE_CPE_ID_VENDOR = trustedfirmware
ARM_TRUSTED_FIRMWARE_CPE_ID_PRODUCT = trusted_firmware-a
ARM_TRUSTED_FIRMWARE_CPE_ID_VERSION = $(patsubst v%,%,$(patsubst lts-%,%,$(ARM_TRUSTED_FIRMWARE_VERSION)))