]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commitdiff
orc: set CVE_PRODUCT
authorPeter Marko <peter.marko@siemens.com>
Sun, 20 Jul 2025 21:08:53 +0000 (23:08 +0200)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Thu, 24 Jul 2025 09:29:51 +0000 (10:29 +0100)
There are new CVEs reported for this recipe which are not for this
componene, but for a component with same name from apache.

sqlite> select vendor, product, id, count(*) from products where product like 'orc' group by vendor, product, id;
apache|orc|CVE-2018-8015|1
apache|orc|CVE-2025-47436|4
gstreamer|orc|CVE-2024-40897|1

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-devtools/orc/orc_0.4.41.bb

index 491ff7106765d12c7c4875b4728b903c8998ff9f..60677577b0aae1a01d7e88c709d5c40fedc35a41 100644 (file)
@@ -9,6 +9,9 @@ SRC_URI[sha256sum] = "cb1bfd4f655289cd39bc04642d597be9de5427623f0861c1fc19c08d98
 
 inherit meson pkgconfig gtk-doc
 
+# distinguish from apache:orc
+CVE_PRODUCT = "gstreamer:orc"
+
 GTKDOC_MESON_OPTION = "gtk_doc"
 GTKDOC_MESON_ENABLE_FLAG = "enabled"
 GTKDOC_MESON_DISABLE_FLAG = "disabled"