package/taglib: add TAGLIB_CPE_ID_VENDOR
cpe:2.3🅰️taglib:taglib is a valid CPE identifier for this package:
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Ataglib%3Ataglib
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit eecf0e55d3
)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
parent
83225c36a0
commit
8d42350eb7
@ -9,6 +9,7 @@ TAGLIB_SITE = http://taglib.github.io/releases
|
||||
TAGLIB_INSTALL_STAGING = YES
|
||||
TAGLIB_LICENSE = LGPL-2.1 or MPL-1.1
|
||||
TAGLIB_LICENSE_FILES = COPYING.LGPL COPYING.MPL
|
||||
TAGLIB_CPE_ID_VENDOR = taglib
|
||||
|
||||
# 0002-Don-t-assume-TDRC-is-an-instance-of-TextIdentificationFrame.patch
|
||||
TAGLIB_IGNORE_CVES += CVE-2017-12678
|
||||
|
Loading…
Reference in New Issue
Block a user