links: set CVE_PRODUCT

There are some unrelated software called "links", which cases
false-positive CVEs to be reported by the CVE checker.

Set the vendor/product pairs that were historically used with
CVEs for this software.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
Gyorgy Sarvari 2025-11-15 19:19:09 +01:00 committed by Khem Raj
parent cc1ec784bf
commit 62a5309732
No known key found for this signature in database
GPG Key ID: BB053355919D3314
2 changed files with 2 additions and 2 deletions

View File

@ -14,4 +14,6 @@ PACKAGECONFIG ??= ""
PACKAGECONFIG[bzip2] = "--with-bzip2,--without-bzip2,bzip2"
PACKAGECONFIG[lzma] = "--with-lzma,--without-lzma,xz"
CVE_PRODUCT = "twibright_labs:links twibright:links links:links"
inherit autotools pkgconfig

View File

@ -9,5 +9,3 @@ EXTRA_OECONF = "--enable-graphics \
--without-directfb --without-pmshell --without-atheos \
--without-x"
SRC_URI[sha256sum] = "22aa96c0b38e1a6f8f7ed9d7a4167a47fc37246097759ef6059ecf8f9ead7998"
CVE_STATUS[CVE-2008-3319] = "cpe-incorrect: The recipe used in the `meta-openembedded` is a different links package compared to the one which has the CVE issue."