boot/optee-os: fix CPE

A new (and hopefully definitive) CPE is to be used for OP-TEE OS:

cpe:2.3:o:trustedfirmware:op-tee:

as reported during review for a TF-A CPE fix[1]. NVD correctly
reports[2] the new CPE deprecates the "old" one Buildroot was using.

CVEs for projects under the TrustedFirmware umbrella are now seemingly
handled under the CPE vendor "trustedfirmware".

[1] https://review.trustedfirmware.org/c/TF-A/trusted-firmware-a/+/49486/comment/2fd93ed7_df27998e/ before last comment from Sandrine
[2] https://nvd.nist.gov/products/cpe/detail/EB42962B-24FD-4716-B3E2-69F3258A57CF
Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
Quentin Schulz
2026-06-25 17:37:45 +02:00
committed by Julien Olivain
parent b7cf802ace
commit e43fb3491a

View File

@@ -9,7 +9,7 @@ OPTEE_OS_LICENSE = BSD-2-Clause
OPTEE_OS_LICENSE_FILES = $(call qstrip,$(BR2_TARGET_OPTEE_OS_LICENSE_FILES))
OPTEE_OS_CPE_ID_PREFIX = cpe:2.3:o
OPTEE_OS_CPE_ID_VENDOR = linaro
OPTEE_OS_CPE_ID_VENDOR = trustedfirmware
OPTEE_OS_CPE_ID_PRODUCT = op-tee
OPTEE_OS_INSTALL_STAGING = YES