From c438422d4972f41c0c59d1b701eefd3028abee43 Mon Sep 17 00:00:00 2001 From: Fabrice Fontaine Date: Sat, 3 Feb 2024 19:28:45 +0100 Subject: [PATCH] package/flex: update FLEX_CPE_ID_VENDOR cpe:2.3:a:flex_project:flex has been deprecated in favor of cpe:2.3:a:westes:flex in October 2023: Flex Fast Lexical Analyser 2.6.4 Version Product Signed-off-by: Fabrice Fontaine Signed-off-by: Yann E. MORIN --- package/flex/flex.mk | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package/flex/flex.mk b/package/flex/flex.mk index f1e731ce2e..c6417fea83 100644 --- a/package/flex/flex.mk +++ b/package/flex/flex.mk @@ -9,7 +9,7 @@ FLEX_SITE = https://github.com/westes/flex/files/981163 FLEX_INSTALL_STAGING = YES FLEX_LICENSE = FLEX FLEX_LICENSE_FILES = COPYING -FLEX_CPE_ID_VENDOR = flex_project +FLEX_CPE_ID_VENDOR = westes # bug does not cause stack overflows in the generated code and has been # noted upstream as a bug in the code generator FLEX_IGNORE_CVES = CVE-2019-6293