From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Tue, 06 Oct 2026 09:01:37 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xDzBB-00AOrh-2h for lore@lore.pengutronix.de; Tue, 06 Oct 2026 09:01:37 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xDzBA-0000L1-SF; Tue, 06 Oct 2026 09:01:36 +0200 Received: from mx1.white.stw.pengutronix.de ([185.203.200.13]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xDzAr-0000Br-Q7 for ptxdist@pengutronix.de; Tue, 06 Oct 2026 09:01:18 +0200 Received: from dude05.red.stw.pengutronix.de (dude05.red.stw.4.pengutronix.de [10.17.1.19]) (Authenticated sender: relay-from-dude05.red.stw.pengutronix.de) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPSA id B1915202303; Tue, 06 Oct 2026 09:01:17 +0200 (CEST) ARC-Seal: i=1; s=20260414; d=pengutronix.de; t=1791270077; a=rsa-sha256; cv=none; b=POkWqaUOpXw7U7nTlTrmReRfoykyIJZ56AgpMCCKZuYe2fk0TMV4PVb8g16lgTtfITm7J5 9f5+UZXnheS2ZRs8Yrr3CI2y4FKmCRvhRsVvg+0oaPYPKLGyeBIoaVCNfHzmyLdYZy6weL wJZeF3zh3azv+qaed6LvJMN8m4lFwdgl11fA8js39+zcpEPgw9rznp4SWNsnVU5O2jQsTx Pd1w5+AsU3FH7BoAIdfvX+itws+Mb/wPHF+St61ctZwWLGLE6L8o4zjPxcjDXQdeFk/nDJ HrWi5Qe+fp6FgQ+mCpG7RrG8RaCKdfNbKdOP7YlIbkvY0HsMQInxH3eIj6s0Mg== ARC-Authentication-Results: i=1; ORIGINATING; auth=pass smtp.auth=relay-from-dude05.red.stw.pengutronix.de smtp.mailfrom=mol@pengutronix.de ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=pengutronix.de; s=20260414; t=1791270077; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=eNtyEHt6NBt0ZW4LHUAibae3lGr8Fhm17GIR0w1XMNY=; b=M13S7EBRhVSDSfd18BtTF9/HjRyOcYrzVB8jBxHeCDGK4TSTEZ5Uaa3GHZ7J4vf0xUmzUb mMatJ+BdQwNaIG+CsJnGkeGFJQdOO9eD/DvuTmP/mJWqQM4bCdLC9Ap1apmLpyqqPB7DKx 4SLTk86qzyx1SapRa8P6kaGRpte11eLj2GcCQ4WF8S7kwlD1V/jBuXeiz9Vu2ncQW0HZ08 yUxwuGKKJy4E6GaBcCBeIqnUGhWmw62OBh9Z+V9HgmZIOmzAOvSUdBajjnCMLV+1tIXz8I OCV2wbCn/tEJSmXoi4HqHNVXx/rbK36nAGO1FGvuqEiZcMvSlyyJ3Mc26r/6bA== Received: by dude05.red.stw.pengutronix.de (Postfix, from userid 1014) id A69EE742505; Tue, 06 Oct 2026 09:01:17 +0200 (CEST) From: Michael Olbrich To: ptxdist@pengutronix.de Date: Tue, 6 Oct 2026 09:01:17 +0200 Message-ID: <20261006070117.2791928-1-m.olbrich@pengutronix.de> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20260921104755.534119-2-ada@thorsis.com> References: <20260921104755.534119-2-ada@thorsis.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-3.0 required=5.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU autolearn=ham autolearn_force=no version=3.4.2 Subject: Re: [ptxdist] [APPLIED] boost: Rework version and add matching CPE identfiers X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: Alexander Dahl Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Thanks, applied as d8093710d25d949b9dfe72398097e4fa82ea562e. Michael [sent from post-receive hook] On Tue, 06 Oct 2026 09:01:17 +0200, Alexander Dahl wrote: > The version format with dots is the one matched by CPE. This way it is > not necessary to override with _CVE_VERSION. The dotted variant is > also better suited in SBOM for later use in CVE scanning tools. Bonus: > the changed download URL has less HTTP redirects. > > Link: https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:boost:boost > Signed-off-by: Alexander Dahl > Message-Id: <20260921104755.534119-2-ada@thorsis.com> > Signed-off-by: Michael Olbrich > > diff --git a/rules/boost.make b/rules/boost.make > index a3b453efb051..013351972aca 100644 > --- a/rules/boost.make > +++ b/rules/boost.make > @@ -15,15 +15,16 @@ PACKAGES-$(PTXCONF_BOOST) += boost > # > # Paths and names > # > -BOOST_VERSION := 1_89_0 > +BOOST_VERSION := 1.89.0 > BOOST_SHA256 := 85a33fa22621b4f314f8e85e1a5e2a9363d22e4f4992925d4bb3bc631b5a0c7a > -BOOST := boost_$(BOOST_VERSION) > +BOOST := boost_$(subst .,_,$(BOOST_VERSION)) > BOOST_SUFFIX := tar.bz2 > -BOOST_URL := $(call ptx/mirror, SF, boost/$(BOOST).$(BOOST_SUFFIX)) > +BOOST_URL := $(call ptx/mirror, SF, boost/$(BOOST_VERSION)/$(BOOST).$(BOOST_SUFFIX)) > BOOST_SOURCE := $(SRCDIR)/$(BOOST).$(BOOST_SUFFIX) > BOOST_DIR := $(BUILDDIR)/$(BOOST) > BOOST_LICENSE := BSL-1.0 > BOOST_LICENSE_FILES := file://LICENSE_1_0.txt;md5=e4224ccaecb14d942c71d31bef20d78c > +BOOST_CVE_PRODUCT := boost:boost > > # ---------------------------------------------------------------------------- > # Prepare