From 87e2a72e13b870530cdeb7ec9f21036aa994d43c Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Fri, 13 Feb 2026 15:34:58 +0100 Subject: [PATCH] package/dash: add CPE The CPE `dash:dash` is valid and has a single CVE associated to it. See [1] & [2]. [1] https://nvd.nist.gov/vuln/detail/CVE-2009-0854 [2] https://security-tracker.debian.org/tracker/source-package/dash Signed-off-by: Thomas Perale Signed-off-by: Julien Olivain --- package/dash/dash.mk | 2 ++ 1 file changed, 2 insertions(+) diff --git a/package/dash/dash.mk b/package/dash/dash.mk index 78effa791c..143972f01a 100644 --- a/package/dash/dash.mk +++ b/package/dash/dash.mk @@ -11,6 +11,8 @@ DASH_LICENSE_FILES = COPYING # We're patching configure.ac DASH_AUTORECONF = YES +DASH_CPE_ID_VENDOR = dash + # dash does not build in parallel DASH_MAKE = $(MAKE1)