[PATCH 0/2] flac & squashfs-tools: set CVE_PRODUCT

[PATCH 0/2] flac & squashfs-tools: set CVE_PRODUCT

[Chen Qi]

The following changes since commit eb8c7b5e1ff3a474ddaa5ebffecef963b225df6d:

  bitbake: HEADER: Drop it (2019-05-04 10:44:49 +0100)

are available in the git repository at:

  git://git.pokylinux.org/poky-contrib ChenQi/cve_products
  http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=ChenQi/cve_products

Chen Qi (2):
  flac: also add flac to CVE_PRODUCT
  squashfs-tools: set CVE_PRODUCT

 meta/recipes-devtools/squashfs-tools/squashfs-tools_git.bb | 2 ++
 meta/recipes-multimedia/flac/flac_1.3.2.bb                 | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)

-- 
1.9.1

[PATCH 1/2] flac: also add flac to CVE_PRODUCT

[Chen Qi]

flac uses both 'flac' and 'libflac' as cve product.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
---
 meta/recipes-multimedia/flac/flac_1.3.2.bb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/meta/recipes-multimedia/flac/flac_1.3.2.bb b/meta/recipes-multimedia/flac/flac_1.3.2.bb
index 92ef897..e8599f6 100644
--- a/meta/recipes-multimedia/flac/flac_1.3.2.bb
+++ b/meta/recipes-multimedia/flac/flac_1.3.2.bb
@@ -21,7 +21,7 @@ SRC_URI = "http://downloads.xiph.org/releases/flac/${BP}.tar.xz \
 SRC_URI[md5sum] = "454f1bfa3f93cc708098d7890d0499bd"
 SRC_URI[sha256sum] = "91cfc3ed61dc40f47f050a109b08610667d73477af6ef36dcad31c31a4a8d53f"
 
-CVE_PRODUCT = "libflac"
+CVE_PRODUCT = "libflac flac"
 
 inherit autotools gettext
 
-- 
1.9.1

[PATCH 2/2] squashfs-tools: set CVE_PRODUCT

[Chen Qi]

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
---
 meta/recipes-devtools/squashfs-tools/squashfs-tools_git.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta/recipes-devtools/squashfs-tools/squashfs-tools_git.bb b/meta/recipes-devtools/squashfs-tools/squashfs-tools_git.bb
index e871f1c..5a8b5f7 100644
--- a/meta/recipes-devtools/squashfs-tools/squashfs-tools_git.bb
+++ b/meta/recipes-devtools/squashfs-tools/squashfs-tools_git.bb
@@ -44,3 +44,5 @@ ARM_INSTRUCTION_SET_armv5 = "arm"
 ARM_INSTRUCTION_SET_armv6 = "arm"
 
 BBCLASSEXTEND = "native nativesdk"
+
+CVE_PRODUCT = "squashfs"
-- 
1.9.1