From ff492a2c87933305dc6e6aa72adf944c853bd983 Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Tue, 16 Sep 2025 22:27:30 +0200 Subject: [PATCH] package/upx: fix deprecated CPE The CPE 'upx_project:upx' has been deprecated in favour of 'upx:upx'. See the following: - https://nvd.nist.gov/products/cpe/detail/36CA8E94-4A35-4373-8D69-22313060322B - https://nvd.nist.gov/vuln/detail/CVE-2020-24119 Signed-off-by: Thomas Perale Signed-off-by: Julien Olivain --- package/upx/upx.mk | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package/upx/upx.mk b/package/upx/upx.mk index 65f4bac517..210114b926 100644 --- a/package/upx/upx.mk +++ b/package/upx/upx.mk @@ -9,7 +9,7 @@ UPX_SITE = https://github.com/upx/upx/releases/download/v$(UPX_VERSION) UPX_SOURCE = upx-$(UPX_VERSION)-src.tar.xz UPX_LICENSE = GPL-2.0+ UPX_LICENSE_FILES = COPYING -UPX_CPE_ID_VALID = YES +UPX_CPE_ID_VENDOR = upx UPX_SUPPORTS_IN_SOURCE_BUILD = NO $(eval $(host-cmake-package))