ping On 2/4/26 20:35, Gyorgy Sarvari via lists.openembedded.org wrote: > live555 is an old project, it has multiple CPEs associated with. > > Set the ones in CVE_PRODUCT that are still active. > > See CVE db query: > > sqlite> select vendor, product, count(*) from products where vendor like > '%live555%' or product like '%live555%' group by 1, 2; > live555|liblivemedia|1 > live555|live555|7 > live555|live555_media_server|2 > live555|media_server|1 > live555|streaming_media|160 > > All of them are relevant to this recipe, although media_server hasn't been > used since 2007, > that one wasn't set. > > Signed-off-by: Gyorgy Sarvari <[email protected]> > --- > meta-oe/recipes-multimedia/live555/live555_20210824.bb | 2 ++ > 1 file changed, 2 insertions(+) > > diff --git a/meta-oe/recipes-multimedia/live555/live555_20210824.bb > b/meta-oe/recipes-multimedia/live555/live555_20210824.bb > index 1622a97fe1..cd738f9575 100644 > --- a/meta-oe/recipes-multimedia/live555/live555_20210824.bb > +++ b/meta-oe/recipes-multimedia/live555/live555_20210824.bb > @@ -13,6 +13,8 @@ URLV = > "${@d.getVar('PV')[0:4]}.${@d.getVar('PV')[4:6]}.${@d.getVar('PV')[6:8]}" > SRC_URI = > "https://download.videolan.org/pub/contrib/live555/live.${URLV}.tar.gz \ > file://config.linux-cross" > > +CVE_PRODUCT = "live555 live555_media_server live555:streaming_media > live555:liblivemedia" > + > # only latest live version stays on > http://www.live555.com/liveMedia/public/, add mirror for older > MIRRORS += "http://www.live555.com/liveMedia/public/ > http://download.videolan.org/contrib/live555/ \n" > > > >
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#124790): https://lists.openembedded.org/g/openembedded-devel/message/124790 Mute This Topic: https://lists.openembedded.org/mt/117641158/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
