]> code.ossystems Code Review - openembedded-core.git/commitdiff
gstreamer: set CVE_PRODUCT
authorRoss Burton <ross.burton@intel.com>
Fri, 9 Feb 2018 12:47:09 +0000 (12:47 +0000)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 16 Feb 2018 18:05:26 +0000 (18:05 +0000)
The CVE database stores all GStreamer issues under the catch-all product
'gstreamer', which none of our recipes match.  Set CVE_PRODUCT to 'gstreamer' in
the core library: this isn't ideal but is far better than not scanning for any.

Signed-off-by: Ross Burton <ross.burton@intel.com>
meta/recipes-multimedia/gstreamer/gstreamer1.0_1.12.4.bb

index bd6cde1b5533ee7db888ea1e1a2edd6d8f1732b8..01b23965133f43f5d0fc704e006530ec4340dc0b 100644 (file)
@@ -10,3 +10,5 @@ SRC_URI[md5sum] = "9d268f2e891cce1ac0832f1cc467d4ea"
 SRC_URI[sha256sum] = "5a8704aa4c2eeb04da192c4a9942f94f860ac1a585de90d9f914bac26a970674"
 
 S = "${WORKDIR}/gstreamer-${PV}"
+
+CVE_PRODUCT = "gstreamer"