* [Buildroot] [PATCH 1/3] package/ogre: add CPE
@ 2026-07-06 10:02 Thomas Perale via buildroot
2026-07-06 10:03 ` [Buildroot] [PATCH 2/3] package/open62541: fix CPE_ID_VERSION Thomas Perale via buildroot
` (3 more replies)
0 siblings, 4 replies; 7+ messages in thread
From: Thomas Perale via buildroot @ 2026-07-06 10:02 UTC (permalink / raw)
To: buildroot; +Cc: Romain Naour, Angelo Compagnucci, James Hilliard
Vulnerabilities such as [1][2] are assigned to the ogre package with the
cpe: ogre3d:ogre.
To correctly match against those vulnerabilities the CPE_ID_VERSION uses
the version without the 'v' prepended.
[1] https://nvd.nist.gov/vuln/detail/CVE-2025-11014
[2] https://nvd.nist.gov/vuln/detail/CVE-2025-11017
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
---
package/ogre/ogre.mk | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/package/ogre/ogre.mk b/package/ogre/ogre.mk
index f3e3fc1d8e..4f19b285be 100644
--- a/package/ogre/ogre.mk
+++ b/package/ogre/ogre.mk
@@ -4,12 +4,15 @@
#
################################################################################
-OGRE_VERSION = v14.4.1
+OGRE_VERSION_UPSTREAM = 14.4.1
+OGRE_VERSION = v$(OGRE_VERSION_UPSTREAM)
OGRE_SITE = https://github.com/OGRECave/ogre
OGRE_SITE_METHOD = git
OGRE_LICENSE = MIT (main library, DeferredShadingMedia samples), Public Domain (samples and plugins)
OGRE_LICENSE_FILES = LICENSE
OGRE_INSTALL_STAGING = YES
+OGRE_CPE_ID_VENDOR = ogre3d
+OGRE_CPE_ID_VERSION = $(OGRE_VERSION_UPSTREAM)
# Download with imgui submodule (https://github.com/ocornut/imgui
OGRE_GIT_SUBMODULES = YES
--
2.55.0
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 7+ messages in thread* [Buildroot] [PATCH 2/3] package/open62541: fix CPE_ID_VERSION
2026-07-06 10:02 [Buildroot] [PATCH 1/3] package/ogre: add CPE Thomas Perale via buildroot
@ 2026-07-06 10:03 ` Thomas Perale via buildroot
2026-07-17 15:47 ` Thomas Perale via buildroot
2026-07-06 10:03 ` [Buildroot] [PATCH 3/3] package/python-web2py: " Thomas Perale via buildroot
` (2 subsequent siblings)
3 siblings, 1 reply; 7+ messages in thread
From: Thomas Perale via buildroot @ 2026-07-06 10:03 UTC (permalink / raw)
To: buildroot; +Cc: Romain Naour, Angelo Compagnucci, James Hilliard
Remove the prepended 'v' coming from the git version to correctly match
with vulnerability such as [1]
[1] https://nvd.nist.gov/vuln/detail/CVE-2022-25761
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
---
package/open62541/open62541.mk | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/package/open62541/open62541.mk b/package/open62541/open62541.mk
index 0d1abf724a..8d9c5e44bf 100644
--- a/package/open62541/open62541.mk
+++ b/package/open62541/open62541.mk
@@ -4,7 +4,8 @@
#
################################################################################
-OPEN62541_VERSION = v1.3.15
+OPEN62541_VERSION_UPSTREAM = 1.3.15
+OPEN62541_VERSION = v$(OPEN62541_VERSION_UPSTREAM)
OPEN62541_SITE_METHOD = git
OPEN62541_SITE = https://github.com/open62541/open62541.git
OPEN62541_GIT_SUBMODULES = YES
@@ -12,6 +13,7 @@ OPEN62541_INSTALL_STAGING = YES
OPEN62541_LICENSE = MPL-2.0
OPEN62541_LICENSE_FILES = LICENSE
OPEN62541_CPE_ID_VENDOR = open62541
+OPEN62541_CPE_ID_VERSION = $(OPEN62541_VERSION_UPSTREAM)
# Force Release build to remove -Werror.
# Don't use git describe to get the version number.
--
2.55.0
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 7+ messages in thread* Re: [Buildroot] [PATCH 2/3] package/open62541: fix CPE_ID_VERSION
2026-07-06 10:03 ` [Buildroot] [PATCH 2/3] package/open62541: fix CPE_ID_VERSION Thomas Perale via buildroot
@ 2026-07-17 15:47 ` Thomas Perale via buildroot
0 siblings, 0 replies; 7+ messages in thread
From: Thomas Perale via buildroot @ 2026-07-17 15:47 UTC (permalink / raw)
To: Thomas Perale; +Cc: buildroot
In reply of:
> Remove the prepended 'v' coming from the git version to correctly match
> with vulnerability such as [1]
>
> [1] https://nvd.nist.gov/vuln/detail/CVE-2022-25761
>
> Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Applied to 2025.02.x & 2026.05.x. Thanks
> ---
> package/open62541/open62541.mk | 4 +++-
> 1 file changed, 3 insertions(+), 1 deletion(-)
>
> diff --git a/package/open62541/open62541.mk b/package/open62541/open62541.mk
> index 0d1abf724a..8d9c5e44bf 100644
> --- a/package/open62541/open62541.mk
> +++ b/package/open62541/open62541.mk
> @@ -4,7 +4,8 @@
> #
> ################################################################################
>
> -OPEN62541_VERSION = v1.3.15
> +OPEN62541_VERSION_UPSTREAM = 1.3.15
> +OPEN62541_VERSION = v$(OPEN62541_VERSION_UPSTREAM)
> OPEN62541_SITE_METHOD = git
> OPEN62541_SITE = https://github.com/open62541/open62541.git
> OPEN62541_GIT_SUBMODULES = YES
> @@ -12,6 +13,7 @@ OPEN62541_INSTALL_STAGING = YES
> OPEN62541_LICENSE = MPL-2.0
> OPEN62541_LICENSE_FILES = LICENSE
> OPEN62541_CPE_ID_VENDOR = open62541
> +OPEN62541_CPE_ID_VERSION = $(OPEN62541_VERSION_UPSTREAM)
>
> # Force Release build to remove -Werror.
> # Don't use git describe to get the version number.
> --
> 2.55.0
>
> _______________________________________________
> buildroot mailing list
> buildroot@buildroot.org
> https://lists.buildroot.org/mailman/listinfo/buildroot
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 7+ messages in thread
* [Buildroot] [PATCH 3/3] package/python-web2py: fix CPE_ID_VERSION
2026-07-06 10:02 [Buildroot] [PATCH 1/3] package/ogre: add CPE Thomas Perale via buildroot
2026-07-06 10:03 ` [Buildroot] [PATCH 2/3] package/open62541: fix CPE_ID_VERSION Thomas Perale via buildroot
@ 2026-07-06 10:03 ` Thomas Perale via buildroot
2026-07-17 15:47 ` Thomas Perale via buildroot
2026-07-14 9:38 ` [Buildroot] [PATCH 1/3] package/ogre: add CPE Julien Olivain via buildroot
2026-07-17 15:47 ` Thomas Perale via buildroot
3 siblings, 1 reply; 7+ messages in thread
From: Thomas Perale via buildroot @ 2026-07-06 10:03 UTC (permalink / raw)
To: buildroot; +Cc: Romain Naour, Angelo Compagnucci, James Hilliard
Remove the prepended 'v' coming from the git version to correctly match
with vulnerability such as [1].
[1] https://nvd.nist.gov/vuln/detail/CVE-2023-45158
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
---
package/python-web2py/python-web2py.mk | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/package/python-web2py/python-web2py.mk b/package/python-web2py/python-web2py.mk
index 5b473698a6..68847a2385 100644
--- a/package/python-web2py/python-web2py.mk
+++ b/package/python-web2py/python-web2py.mk
@@ -4,7 +4,8 @@
#
################################################################################
-PYTHON_WEB2PY_VERSION = v3.1.1
+PYTHON_WEB2PY_VERSION_UPSTREAM = 3.1.1
+PYTHON_WEB2PY_VERSION = v$(PYTHON_WEB2PY_VERSION_UPSTREAM)
PYTHON_WEB2PY_SITE = https://github.com/web2py/web2py.git
PYTHON_WEB2PY_SITE_METHOD = git
PYTHON_WEB2PY_GIT_SUBMODULES = YES
@@ -12,6 +13,7 @@ PYTHON_WEB2PY_LICENSE = LGPL-3.0
PYTHON_WEB2PY_LICENSE_FILES = LICENSE.web2py.txt
PYTHON_WEB2PY_CPE_ID_VENDOR = web2py
PYTHON_WEB2PY_CPE_ID_PRODUCT = web2py
+PYTHON_WEB2PY_CPE_ID_VERSION = $(PYTHON_WEB2PY_VERSION_UPSTREAM)
PYTHON_WEB2PY_DEPENDENCIES = host-python3 python3 \
host-python-pydal host-python-yatl
--
2.55.0
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 7+ messages in thread
* Re: [Buildroot] [PATCH 3/3] package/python-web2py: fix CPE_ID_VERSION
2026-07-06 10:03 ` [Buildroot] [PATCH 3/3] package/python-web2py: " Thomas Perale via buildroot
@ 2026-07-17 15:47 ` Thomas Perale via buildroot
0 siblings, 0 replies; 7+ messages in thread
From: Thomas Perale via buildroot @ 2026-07-17 15:47 UTC (permalink / raw)
To: Thomas Perale; +Cc: buildroot
In reply of:
> Remove the prepended 'v' coming from the git version to correctly match
> with vulnerability such as [1].
>
> [1] https://nvd.nist.gov/vuln/detail/CVE-2023-45158
>
> Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Applied to 2025.02.x & 2026.05.x. Thanks
> ---
> package/python-web2py/python-web2py.mk | 4 +++-
> 1 file changed, 3 insertions(+), 1 deletion(-)
>
> diff --git a/package/python-web2py/python-web2py.mk b/package/python-web2py/python-web2py.mk
> index 5b473698a6..68847a2385 100644
> --- a/package/python-web2py/python-web2py.mk
> +++ b/package/python-web2py/python-web2py.mk
> @@ -4,7 +4,8 @@
> #
> ################################################################################
>
> -PYTHON_WEB2PY_VERSION = v3.1.1
> +PYTHON_WEB2PY_VERSION_UPSTREAM = 3.1.1
> +PYTHON_WEB2PY_VERSION = v$(PYTHON_WEB2PY_VERSION_UPSTREAM)
> PYTHON_WEB2PY_SITE = https://github.com/web2py/web2py.git
> PYTHON_WEB2PY_SITE_METHOD = git
> PYTHON_WEB2PY_GIT_SUBMODULES = YES
> @@ -12,6 +13,7 @@ PYTHON_WEB2PY_LICENSE = LGPL-3.0
> PYTHON_WEB2PY_LICENSE_FILES = LICENSE.web2py.txt
> PYTHON_WEB2PY_CPE_ID_VENDOR = web2py
> PYTHON_WEB2PY_CPE_ID_PRODUCT = web2py
> +PYTHON_WEB2PY_CPE_ID_VERSION = $(PYTHON_WEB2PY_VERSION_UPSTREAM)
> PYTHON_WEB2PY_DEPENDENCIES = host-python3 python3 \
> host-python-pydal host-python-yatl
>
> --
> 2.55.0
>
> _______________________________________________
> buildroot mailing list
> buildroot@buildroot.org
> https://lists.buildroot.org/mailman/listinfo/buildroot
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: [Buildroot] [PATCH 1/3] package/ogre: add CPE
2026-07-06 10:02 [Buildroot] [PATCH 1/3] package/ogre: add CPE Thomas Perale via buildroot
2026-07-06 10:03 ` [Buildroot] [PATCH 2/3] package/open62541: fix CPE_ID_VERSION Thomas Perale via buildroot
2026-07-06 10:03 ` [Buildroot] [PATCH 3/3] package/python-web2py: " Thomas Perale via buildroot
@ 2026-07-14 9:38 ` Julien Olivain via buildroot
2026-07-17 15:47 ` Thomas Perale via buildroot
3 siblings, 0 replies; 7+ messages in thread
From: Julien Olivain via buildroot @ 2026-07-14 9:38 UTC (permalink / raw)
To: Thomas Perale; +Cc: buildroot, Romain Naour, Angelo Compagnucci, James Hilliard
On 06/07/2026 12:02, Thomas Perale via buildroot wrote:
> Vulnerabilities such as [1][2] are assigned to the ogre package with
> the
> cpe: ogre3d:ogre.
>
> To correctly match against those vulnerabilities the CPE_ID_VERSION
> uses
> the version without the 'v' prepended.
>
> [1] https://nvd.nist.gov/vuln/detail/CVE-2025-11014
> [2] https://nvd.nist.gov/vuln/detail/CVE-2025-11017
>
> Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Series applied to master, thanks.
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: [Buildroot] [PATCH 1/3] package/ogre: add CPE
2026-07-06 10:02 [Buildroot] [PATCH 1/3] package/ogre: add CPE Thomas Perale via buildroot
` (2 preceding siblings ...)
2026-07-14 9:38 ` [Buildroot] [PATCH 1/3] package/ogre: add CPE Julien Olivain via buildroot
@ 2026-07-17 15:47 ` Thomas Perale via buildroot
3 siblings, 0 replies; 7+ messages in thread
From: Thomas Perale via buildroot @ 2026-07-17 15:47 UTC (permalink / raw)
To: Thomas Perale; +Cc: buildroot
In reply of:
> Vulnerabilities such as [1][2] are assigned to the ogre package with the
> cpe: ogre3d:ogre.
>
> To correctly match against those vulnerabilities the CPE_ID_VERSION uses
> the version without the 'v' prepended.
>
> [1] https://nvd.nist.gov/vuln/detail/CVE-2025-11014
> [2] https://nvd.nist.gov/vuln/detail/CVE-2025-11017
>
> Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Applied to 2025.02.x & 2026.05.x. Thanks
> ---
> package/ogre/ogre.mk | 5 ++++-
> 1 file changed, 4 insertions(+), 1 deletion(-)
>
> diff --git a/package/ogre/ogre.mk b/package/ogre/ogre.mk
> index f3e3fc1d8e..4f19b285be 100644
> --- a/package/ogre/ogre.mk
> +++ b/package/ogre/ogre.mk
> @@ -4,12 +4,15 @@
> #
> ################################################################################
>
> -OGRE_VERSION = v14.4.1
> +OGRE_VERSION_UPSTREAM = 14.4.1
> +OGRE_VERSION = v$(OGRE_VERSION_UPSTREAM)
> OGRE_SITE = https://github.com/OGRECave/ogre
> OGRE_SITE_METHOD = git
> OGRE_LICENSE = MIT (main library, DeferredShadingMedia samples), Public Domain (samples and plugins)
> OGRE_LICENSE_FILES = LICENSE
> OGRE_INSTALL_STAGING = YES
> +OGRE_CPE_ID_VENDOR = ogre3d
> +OGRE_CPE_ID_VERSION = $(OGRE_VERSION_UPSTREAM)
>
> # Download with imgui submodule (https://github.com/ocornut/imgui
> OGRE_GIT_SUBMODULES = YES
> --
> 2.55.0
>
> _______________________________________________
> buildroot mailing list
> buildroot@buildroot.org
> https://lists.buildroot.org/mailman/listinfo/buildroot
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 7+ messages in thread
end of thread, other threads:[~2026-07-17 15:47 UTC | newest]
Thread overview: 7+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-07-06 10:02 [Buildroot] [PATCH 1/3] package/ogre: add CPE Thomas Perale via buildroot
2026-07-06 10:03 ` [Buildroot] [PATCH 2/3] package/open62541: fix CPE_ID_VERSION Thomas Perale via buildroot
2026-07-17 15:47 ` Thomas Perale via buildroot
2026-07-06 10:03 ` [Buildroot] [PATCH 3/3] package/python-web2py: " Thomas Perale via buildroot
2026-07-17 15:47 ` Thomas Perale via buildroot
2026-07-14 9:38 ` [Buildroot] [PATCH 1/3] package/ogre: add CPE Julien Olivain via buildroot
2026-07-17 15:47 ` Thomas Perale via buildroot
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox