b9db38d370
FOO_CPE_ID_VALID really ought to be an internal implementaion detail.
Packages that really want to trigger their CPE defintitions really
should set one of the actual variables to a meaningful value.
There are two CPE-related variables that we could chose to set to
replace FOO_CPE_ID_VALID: FOO_CPE_ID_VENDOR and FOO_CPE_ID_PRODUCT.
Between those two, _VENDOR more often diverges from the default than
_PRODUCT does, so that's what we use.
---8<------8<------8<------8<------8<---
#!/bin/bash
# Replace FOO_CPE_ID_VALID = YES with FOO_CPE_ID_VENDOR = foo_project
for i in $(git grep -l -E '[^)]_CPE_ID_VALID = YES' package support); do
pkg="$(basename "${i%/*}")"
sed -r -i -e "s/_CPE_ID_VALID = YES/_CPE_ID_VENDOR = ${pkg}_project/" "${i}"
done
---8<------8<------8<------8<------8<---
Reported-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Cc: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Cc: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Cc: Matthew Weber <matthew.weber@rockwellcollins.com>
Cc: Fabrice Fontaine <fontaine.fabrice@gmail.com>
[Peter: update cpe-test comment to reflect pkg3 change]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
22 lines
741 B
Makefile
22 lines
741 B
Makefile
################################################################################
|
|
#
|
|
# libexif
|
|
#
|
|
################################################################################
|
|
|
|
LIBEXIF_VERSION = 0.6.22
|
|
LIBEXIF_SOURCE = libexif-$(LIBEXIF_VERSION).tar.xz
|
|
LIBEXIF_SITE = \
|
|
https://github.com/libexif/libexif/releases/download/libexif-$(subst .,_,$(LIBEXIF_VERSION))-release
|
|
LIBEXIF_INSTALL_STAGING = YES
|
|
LIBEXIF_DEPENDENCIES = host-pkgconf
|
|
LIBEXIF_LICENSE = LGPL-2.1+
|
|
LIBEXIF_LICENSE_FILES = COPYING
|
|
LIBEXIF_CPE_ID_VENDOR = libexif_project
|
|
# 0001-fixed-another-unsigned-integer-overflow.patch
|
|
LIBEXIF_IGNORE_CVES += CVE-2020-0198
|
|
# 0002-fixed-a-incorrect-overflow-check.patch
|
|
LIBEXIF_IGNORE_CVES += CVE-2020-0452
|
|
|
|
$(eval $(autotools-package))
|