Re: [Buildroot] [PATCH] package/arm-trusted-firmware: add ARM_TRUSTED_FIRMWARE_CPE_ID_*

[Heiko Stuebner via buildroot <buildroot@buildroot.org>]

Am Mittwoch, 25. März 2026, 19:12:33 Mitteleuropäische Normalzeit schrieb Quentin Schulz:
> Hi Heiko,
> 
> On 3/25/26 4:03 PM, Heiko Stuebner wrote:
> > From: Heiko Stuebner <heiko.stuebner@cherry.de>
> > 
> > Trusted-Firmware has been using a number of CPE identifiers in the past
> > but especially after v2.4, the correct identifier would be similar
> > to cpe:2.3:o:arm:trusted_firmware-a:2.12:rc0:*:*:-:*:*:*
> > 
> >    https://nvd.nist.gov/products/cpe/detail/65DEC230-1CD5-40DB-903A-22537D1E44FE
> > 
> > Add the relevant CPE fields to the trusted-firmware package.
> > 
> 
> Thinking about it a bit more, I **think** we may want to strip lts- 
> prefix for the CPE_ID_VERSION. I don't see any version past 2.4 on NVD 
> so we cannot really know what they'll do once they need to tackle LTSes, 
> but I am assuming they are NOT going to use the lts- prefix?
> 
> What do you think?

I think you're quite right :-) .

I also realized I messed the versioning anyway and did not remove
the "v" to match the version used in CPEs.

Done both now in v2.

Thanks for the review
Heiko


_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot