helium-3rd-party/meta-openembedded
1
0
Fork 0
mirror of git://git.openembedded.org/meta-openembedded synced 2026-08-11 12:52:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

audit: Fix CVE_PRODUCT

Browse Source 
Fix "audit" set in CVE_PRODUCT to "linux:audit" to detect only vulnerabilities where the vendor is "linux".

Currently, CVE_PRODUCT also detects vulnerabilities where the vendor is "visionsoft",
which are unrelated to the "audit" in this recipe.
https://www.opencve.io/cve?vendor=visionsoft&product=audit

In addition, all the vulnerabilities currently detected in "audit" have the vendor of "visionsoft" or "linux".
Therefore, fix "audit" set in CVE_PRODUCT to "linux:audit".

Signed-off-by: Shinji Matsunaga <shin.matsunaga@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit e87e51da49fe121be8f6dd4cec3263a345f2f876)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
Shinji Matsunaga 2025-11-13 19:18:55 +13:00 committed by Anuj Mittal
parent 4fc68d0837
commit 80adc2113c
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
meta-oe/recipes-security/audit/audit_4.0.2.bb
View File

@ -99,3 +99,5 @@ do_install:append() {
# Create /var/spool/audit directory for audisp-remote
install -d -m 0700 ${D}${localstatedir}/spool/audit
}
CVE_PRODUCT = "linux:audit"