db: set correct product and version for CVE matches

We may ship db 5.3.28, but the CVE database knows this as oracle_berkeley_db
11.2.5.3.28.

(From OE-Core rev: f348cd641416d2750dfec8e19bd01e7ae9f809aa)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

1 files changed, 3 insertions, 0 deletions

diff --git a/meta/recipes-support/db/db_5.3.28.bb b/meta/recipes-support/db/db_5.3.28.bb
index fe71967715..093ee44909 100644
--- a/meta/recipes-support/db/db_5.3.28.bb
+++ b/meta/recipes-support/db/db_5.3.28.bb
@@ -14,6 +14,9 @@ HOMEPAGE = "http://www.oracle.com/technetwork/database/database-technologies/ber
 LICENSE = "Sleepycat"
 RCONFLICTS_${PN} = "db3"
 
+CVE_PRODUCT = "oracle_berkeley_db"
+CVE_VERSION = "11.2.${PV}"
+
 PR = "r1"
 PE = "1"