From 25073f9c0e0ca7ecfe8f38bf620147314c0d3ddc Mon Sep 17 00:00:00 2001 From: Peter Marko Date: Wed, 27 Sep 2023 23:05:40 +0200 Subject: json-c: define CVE_VERSION Recently NVD updated all CVEs for json-c and old fixed CVE-2020-12762 is reported by cve_check now. NVD match clause now includes full tag name including date which is "greater" than tag without additional numbers. Fix it by defining CVE_VERSION identical to full tag. Put it close to hash so recipe update patch includes this line. (From OE-Core rev: 55e9ff0fe1de70f226557529f73c28f34f6956ed) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman --- meta/recipes-devtools/json-c/json-c_0.15.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/recipes-devtools/json-c/json-c_0.15.bb b/meta/recipes-devtools/json-c/json-c_0.15.bb index 4da30bc50c..b3679e0135 100644 --- a/meta/recipes-devtools/json-c/json-c_0.15.bb +++ b/meta/recipes-devtools/json-c/json-c_0.15.bb @@ -12,6 +12,9 @@ SRC_URI = " \ SRC_URI[sha256sum] = "b8d80a1ddb718b3ba7492916237bbf86609e9709fb007e7f7d4322f02341a4c6" +# NVD uses full tag name including date +CVE_VERSION = "0.15-20200726" + UPSTREAM_CHECK_URI = "https://github.com/${BPN}/${BPN}/tags" UPSTREAM_CHECK_REGEX = "json-c-(?P\d+(\.\d+)+)-\d+" -- cgit v1.2.3-54-g00ecf