From: Himanshu Jadon <hjadon@cisco.com>
Date: Mon, 27 Apr 2026 05:12:09 +0000 (-0700)
Subject: apr: Add CVE_PRODUCT to support product name
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=bc3803e12d4938e2de514c39bd5d0f011f883ace;p=thirdparty%2Fopenembedded%2Fopenembedded-core.git

apr: Add CVE_PRODUCT to support product name

apr is tracked in NVD under apache:portable_runtime rather than the
recipe name apr. Set CVE_PRODUCT accordingly so cve-check uses the
correct NVD product identity for APR.

No additional alias was found to be necessary for this recipe.

Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
---

diff --git a/meta/recipes-support/apr/apr_1.7.6.bb b/meta/recipes-support/apr/apr_1.7.6.bb
index 8ad3756b3a..43d5b0bf4d 100644
--- a/meta/recipes-support/apr/apr_1.7.6.bb
+++ b/meta/recipes-support/apr/apr_1.7.6.bb
@@ -138,3 +138,6 @@ do_install_ptest() {
 }
 
 export CONFIG_SHELL = "/bin/bash"
+
+# Add CVE_PRODUCT to match the NVD CPE product name
+CVE_PRODUCT = "apache:portable_runtime"