From 0d9357b3ccadb96d9ff9bff829e582bed8b100a1 Mon Sep 17 00:00:00 2001 From: Peter Seiderer Date: Mon, 22 Apr 2024 09:38:39 +0200 Subject: [PATCH] package/speechd: set CPE_ID_VENDOR (to silence mismatched CVE warning) - set CPE_ID_VENDOR to silence mismatched CVE-2001-0956 ([1], [2]) warning clearly aiming some other product/version ("speechd 0.54 with Festival or rsynth speech synthesis package") [1] https://security-tracker.debian.org/tracker/CVE-2001-0956 [2] https://github.com/advisories/GHSA-67cw-4jhh-3jm7 Signed-off-by: Peter Seiderer Signed-off-by: Yann E. MORIN (cherry picked from commit 206527347c1f63d24d871bf5dcb065861bd1c2a4) Signed-off-by: Peter Korsgaard --- package/speechd/speechd.mk | 1 + 1 file changed, 1 insertion(+) diff --git a/package/speechd/speechd.mk b/package/speechd/speechd.mk index 7d50f88c1d..669bec0634 100644 --- a/package/speechd/speechd.mk +++ b/package/speechd/speechd.mk @@ -8,6 +8,7 @@ SPEECHD_VERSION = 0.11.5 SPEECHD_SITE = $(call github,brailcom,speechd,$(SPEECHD_VERSION)) SPEECHD_LICENSE = GPL-2.0+, GPL-3.0+ (buildsystem), LGPL-2.1+ SPEECHD_LICENSE_FILES = COPYING.GPL-2 COPYING.GPL-3 COPYING.LGPL +SPEECHD_CPE_ID_VENDOR = brailcom SPEECHD_INSTALL_STAGING = YES # speechd source code is released without configure script SPEECHD_AUTORECONF = YES