Re: [OE-core] [PATCH] libtheora: set CVE_PRODUCT

[Randy MacLeod <randy.macleod@windriver.com>]

[-- Attachment #1: Type: text/plain, Size: 1549 bytes --]

Hi Ken,

On 2025-12-18 11:01 p.m., Ken Kurematsu via lists.openembedded.org wrote:
> In the NVD database, the product name of libtheora is theora.
> This was set to ensure that cve-check works correctly.
>
> Signed-off-by: Ken Kurematsu<k.kurematsu@nskint.co.jp>
> ---
>   meta/recipes-multimedia/libtheora/libtheora_1.2.0.bb | 2 ++
>   1 file changed, 2 insertions(+)
>
> diff --git a/meta/recipes-multimedia/libtheora/libtheora_1.2.0.bb b/meta/recipes-multimedia/libtheora/libtheora_1.2.0.bb
> index 04de8507fb..bacaf3aee6 100644
> --- a/meta/recipes-multimedia/libtheora/libtheora_1.2.0.bb
> +++ b/meta/recipes-multimedia/libtheora/libtheora_1.2.0.bb
> @@ -14,6 +14,8 @@ SRC_URI[sha256sum] = "ebdf77a8f5c0a8f7a9e42323844fa09502b34eb1d1fece7b5f54da41fe
>
>   UPSTREAM_CHECK_REGEX = "libtheora-(?P<pver>\d+(\.\d)+)\.(tar\.gz|tgz)"
>
> +CVE_PRODUCT = "theora"
> +

 From YP patch review,

Please use:

CVE_PRODUCT += "theora"

to catch both libtheora and theora


Thanks,

../Randy

>   inherit autotools pkgconfig
>
>   EXTRA_OECONF = "--disable-examples --disable-doc"
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#228198):https://lists.openembedded.org/g/openembedded-core/message/228198
> Mute This Topic:https://lists.openembedded.org/mt/116854732/3616765
> Group Owner:openembedded-core+owner@lists.openembedded.org
> Unsubscribe:https://lists.openembedded.org/g/openembedded-core/unsub [randy.macleod@windriver.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>

-- 
# Randy MacLeod
# Wind River Linux

[-- Attachment #2: Type: text/html, Size: 3046 bytes --]