From 4aa2dfec7019fde0b691ca3d0ccf7f6e40907655 Mon Sep 17 00:00:00 2001 From: Himanshu Jadon Date: Tue, 2 Jun 2026 06:29:29 -0700 Subject: [PATCH] apr: Add CVE_PRODUCT to support product name apr is tracked in NVD under apache:portable_runtime rather than the recipe name apr. Set CVE_PRODUCT accordingly so cve-check uses the correct NVD product identity for APR. No additional alias was found to be necessary for this recipe. (From OE-Core rev: d93c564790a51b53347bde257151c778e8867624) Signed-off-by: Himanshu Jadon Signed-off-by: Mathieu Dubois-Briand (cherry picked from commit bc3803e12d4938e2de514c39bd5d0f011f883ace) Signed-off-by: Himanshu Jadon Signed-off-by: Yoann Congal Signed-off-by: Paul Barker --- meta/recipes-support/apr/apr_1.7.5.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/recipes-support/apr/apr_1.7.5.bb b/meta/recipes-support/apr/apr_1.7.5.bb index 78796476e2..7a3445aa20 100644 --- a/meta/recipes-support/apr/apr_1.7.5.bb +++ b/meta/recipes-support/apr/apr_1.7.5.bb @@ -136,3 +136,6 @@ do_install_ptest() { } export CONFIG_SHELL="/bin/bash" + +# Add CVE_PRODUCT to match the NVD CPE product name +CVE_PRODUCT = "apache:portable_runtime"