From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Mon, 14 Sep 2026 14:14:01 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1x65ZR-0023cj-0W for lore@lore.pengutronix.de; Mon, 14 Sep 2026 14:14:01 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1x65ZP-0003nb-L3; Mon, 14 Sep 2026 14:13:59 +0200 Received: from mx1.white.stw.pengutronix.de ([185.203.200.13]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1x65Yd-0001M7-9O for ptxdist@pengutronix.de; Mon, 14 Sep 2026 14:13:11 +0200 Authentication-Results: mx1.white.stw.pengutronix.de; dkim=pass header.d=thorsis.com header.s=dkim header.b="LkM1/olj"; spf=pass (mx1.white.stw.pengutronix.de: domain of ada@thorsis.com designates 217.92.40.78 as permitted sender) smtp.mailfrom=ada@thorsis.com; dmarc=pass (policy=quarantine) header.from=thorsis.com Received: from mail.thorsis.com (mail.thorsis.com [217.92.40.78]) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPS id 3486720079F for ; Mon, 14 Sep 2026 14:13:11 +0200 (CEST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id B69CD14876BE for ; Mon, 14 Sep 2026 14:13:17 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=thorsis.com; s=dkim; t=1789387997; h=from:subject:date:message-id:to:mime-version: content-transfer-encoding:in-reply-to:references; bh=uYjZ0Gidsuml0GbwNCx722E/iBWZvemZFmbPJVU3ohU=; b=LkM1/oljMjtEqR5paOS5CL/xKNw9mcF/g357aYL/PskCKMLgLve91UCvu7d2SbO06PJVCz q9t/KqYnwO7cOVF384JYagVrAxN3U8mhtCuwHMY4NDzD1ZuIq2iyvINvRoER8wWBxrEANV 0Gr/loSctATQAjAKpXnwUsQBlcRN6tcgyR6nc7i9HI6KwgNsZV6Rmd176YL4plTW/EuwXP RmTjdC7G+IBobLm+OWNy8jkVi1G2w0cTuYKGfojbYI+8WlBdQTQ4KApPi2pLDosELkA2bj zWgKGbQrBYOfE1IKCSe90bTlhM4L0xig7QTHoLxvQwmtHbfnnDrLmuoyoRSaRw== To: ptxdist@pengutronix.de Date: Mon, 14 Sep 2026 14:13:02 +0200 Message-ID: <20260914121307.134745-17-ada@thorsis.com> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20260914121307.134745-1-ada@thorsis.com> References: <20260914121307.134745-1-ada@thorsis.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Last-TLS-Session-Version: TLSv1.3 X-Rspamd-Server: mx1 X-Stat-Signature: qenpcwfzmad1cfgxde8euiawf41pji34 X-Rspamd-Queue-Id: 3486720079F X-Spamd-Result: default: False [-2.50 / 15.00]; BAYES_HAM(-3.00)[100.00%]; MID_CONTAINS_FROM(1.00)[]; R_MISSING_CHARSET(0.50)[]; DMARC_POLICY_ALLOW(-0.50)[thorsis.com,quarantine]; R_SPF_ALLOW(-0.20)[+mx:c]; R_DKIM_ALLOW(-0.20)[thorsis.com:s=dkim]; MIME_GOOD(-0.10)[text/plain]; RCVD_VIA_SMTP_AUTH(0.00)[]; ARC_NA(0.00)[]; RCVD_COUNT_ONE(0.00)[1]; ASN(0.00)[asn:3320, ipnet:217.80.0.0/12, country:DE]; MIME_TRACE(0.00)[0:+]; RCVD_TLS_ALL(0.00)[]; NEURAL_HAM(-0.00)[-1.000]; RCPT_COUNT_ONE(0.00)[1]; FROM_EQ_ENVFROM(0.00)[]; FROM_HAS_DN(0.00)[]; RECEIVED_HELO_LOCALHOST(0.00)[]; TO_DN_NONE(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[ptxdist@pengutronix.de]; TO_MATCH_ENVRCPT_ALL(0.00)[]; DKIM_TRACE(0.00)[thorsis.com:+] X-Rspamd-Action: no action X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-3.0 required=5.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,SPF_HELO_NONE autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH 16/21] nlohmann-json: Add matching CPE identifiers X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , From: Alexander Dahl via ptxdist Reply-To: ptxdist@pengutronix.de Cc: Alexander Dahl Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Upstream author Niels Lohmann just calls the project 'json', which makes it somewhat hard for packaging. We obviously need to explicitly set vendor and product to the ones used in the CPE database in this case. Link: https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:nlohmann:json Signed-off-by: Alexander Dahl --- rules/nlohmann-json.make | 1 + 1 file changed, 1 insertion(+) diff --git a/rules/nlohmann-json.make b/rules/nlohmann-json.make index 28693d680..29bd579f9 100644 --- a/rules/nlohmann-json.make +++ b/rules/nlohmann-json.make @@ -23,6 +23,7 @@ NLOHMANN_JSON_SOURCE := $(SRCDIR)/$(NLOHMANN_JSON).$(NLOHMANN_JSON_SUFFIX) NLOHMANN_JSON_DIR := $(BUILDDIR)/$(NLOHMANN_JSON) NLOHMANN_JSON_LICENSE := MIT NLOHMANN_JSON_LICENSE_FILES := file://LICENSE.MIT;md5=3b489645de9825cca5beeb9a7e18b6eb +NLOHMANN_JSON_CVE_PRODUCT := nlohmann:json # ---------------------------------------------------------------------------- # Prepare -- 2.47.3