[Buildroot] [PATCH 1/1] package/gcc/gcc-final.mx: fix CPE identification

[Buildroot] [PATCH 1/1] package/gcc/gcc-final.mx: fix CPE identification

[Fabien Lehoussel via buildroot]

Fix the CPE (Common Platform Enumeration) identification in the gcc-final package to ensure proper vulnerability tracking.

Signed-off-by: Fabien Lehoussel <fabien.lehoussel@smile.fr>
---
 package/gcc/gcc-final/gcc-final.mk | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/package/gcc/gcc-final/gcc-final.mk b/package/gcc/gcc-final/gcc-final.mk
index 43aea72420..97a64ae2fa 100644
--- a/package/gcc/gcc-final/gcc-final.mk
+++ b/package/gcc/gcc-final/gcc-final.mk
@@ -12,6 +12,9 @@ GCC_FINAL_LICENSE_FILES = COPYING.RUNTIME
 HOST_GCC_FINAL_LICENSE = $(HOST_GCC_LICENSE)
 HOST_GCC_FINAL_LICENSE_FILES = $(HOST_GCC_LICENSE_FILES)
 
+GCC_FINAL_CPE_ID_VENDOR = gnu
+GCC_FINAL_CPE_ID_PRODUCT = gcc
+
 GCC_FINAL_DEPENDENCIES = host-gcc-final
 GCC_FINAL_ADD_TOOLCHAIN_DEPENDENCY = NO
 GCC_FINAL_INSTALL_STAGING = YES
-- 
2.43.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH 1/1] package/gcc/gcc-final.mx: fix CPE identification

[Thomas Petazzoni via buildroot]

Hello Fabien,

Your commit title said "gcc-final.mx" which is not correct, it's
"gcc-final.mk", but anyway we generally just give the package name, so:
"package/gcc/gcc-final: ..." was enough.

On Wed, 16 Jul 2025 12:07:11 +0200
Fabien Lehoussel via buildroot <buildroot@buildroot.org> wrote:

> Fix the CPE (Common Platform Enumeration) identification in the gcc-final package to ensure proper vulnerability tracking.

Commit messages should be wrapped to ~72-80 columns. Also, we like to
give a link to the NVD database showing that the CPE identifier being
added is indeed correct. So I've added:

https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:gnu:gcc

and applied to master. Thanks!

Thomas
-- 
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH 1/1] package/gcc/gcc-final.mx: fix CPE identification

[Thomas Perale via buildroot]

In reply of:
> Fix the CPE (Common Platform Enumeration) identification in the gcc-final package to ensure proper vulnerability tracking.
> 
> Signed-off-by: Fabien Lehoussel <fabien.lehoussel@smile.fr>

Applied to 2025.02.x & 2025.05.x. Thanks

> ---
>  package/gcc/gcc-final/gcc-final.mk | 3 +++
>  1 file changed, 3 insertions(+)
> 
> diff --git a/package/gcc/gcc-final/gcc-final.mk b/package/gcc/gcc-final/gcc-final.mk
> index 43aea72420..97a64ae2fa 100644
> --- a/package/gcc/gcc-final/gcc-final.mk
> +++ b/package/gcc/gcc-final/gcc-final.mk
> @@ -12,6 +12,9 @@ GCC_FINAL_LICENSE_FILES = COPYING.RUNTIME
>  HOST_GCC_FINAL_LICENSE = $(HOST_GCC_LICENSE)
>  HOST_GCC_FINAL_LICENSE_FILES = $(HOST_GCC_LICENSE_FILES)
>  
> +GCC_FINAL_CPE_ID_VENDOR = gnu
> +GCC_FINAL_CPE_ID_PRODUCT = gcc
> +
>  GCC_FINAL_DEPENDENCIES = host-gcc-final
>  GCC_FINAL_ADD_TOOLCHAIN_DEPENDENCY = NO
>  GCC_FINAL_INSTALL_STAGING = YES
> -- 
> 2.43.0
> 
> _______________________________________________
> buildroot mailing list
> buildroot@buildroot.org
> https://lists.buildroot.org/mailman/listinfo/buildroot
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot