live555 is an old project, it has multiple CPEs associated with.

Set the ones in CVE_PRODUCT that are still active.

See CVE db query:

sqlite> select vendor, product, count(*) from products where vendor like 
'%live555%' or product like '%live555%' group by 1, 2;
live555|liblivemedia|1
live555|live555|7
live555|live555_media_server|2
live555|media_server|1
live555|streaming_media|160

All of them are relevant to this recipe, although media_server hasn't been used 
since 2007,
that one wasn't set.

Signed-off-by: Gyorgy Sarvari <[email protected]>
---
 meta-oe/recipes-multimedia/live555/live555_20210824.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta-oe/recipes-multimedia/live555/live555_20210824.bb 
b/meta-oe/recipes-multimedia/live555/live555_20210824.bb
index 1622a97fe1..cd738f9575 100644
--- a/meta-oe/recipes-multimedia/live555/live555_20210824.bb
+++ b/meta-oe/recipes-multimedia/live555/live555_20210824.bb
@@ -13,6 +13,8 @@ URLV = 
"${@d.getVar('PV')[0:4]}.${@d.getVar('PV')[4:6]}.${@d.getVar('PV')[6:8]}"
 SRC_URI = 
"https://download.videolan.org/pub/contrib/live555/live.${URLV}.tar.gz \
            file://config.linux-cross"
 
+CVE_PRODUCT = "live555 live555_media_server live555:streaming_media 
live555:liblivemedia"
+
 # only latest live version stays on http://www.live555.com/liveMedia/public/, 
add mirror for older
 MIRRORS += "http://www.live555.com/liveMedia/public/ 
http://download.videolan.org/contrib/live555/ \n"
 
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#124145): 
https://lists.openembedded.org/g/openembedded-devel/message/124145
Mute This Topic: https://lists.openembedded.org/mt/117641158/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to