From b0424cf1ea7054fd2a1662c47d9a57fb0767df12 Mon Sep 17 00:00:00 2001 From: Robert Joslyn Date: Sat, 3 Feb 2024 10:09:17 -0800 Subject: gtk: Set CVE_PRODUCT The CPE vendor is "gnome" and the CPE product is "gtk" for both gtk+3 and gtk4 recipes. Set CVE_PRODUCT so we properly match the NVD database. (From OE-Core rev: e1bab7d2f5a885f2e4fd0332599edb8bfa55be45) Signed-off-by: Robert Joslyn Signed-off-by: Richard Purdie (cherry picked from commit 253f5f745d66acefcc739f1c9ad2dd46be630e47) Signed-off-by: Steve Sakoman --- meta/recipes-gnome/gtk+/gtk+3_3.24.38.bb | 2 ++ meta/recipes-gnome/gtk+/gtk4_4.12.3.bb | 2 ++ 2 files changed, 4 insertions(+) diff --git a/meta/recipes-gnome/gtk+/gtk+3_3.24.38.bb b/meta/recipes-gnome/gtk+/gtk+3_3.24.38.bb index 37fa0a7290..c23c46a689 100644 --- a/meta/recipes-gnome/gtk+/gtk+3_3.24.38.bb +++ b/meta/recipes-gnome/gtk+/gtk+3_3.24.38.bb @@ -13,3 +13,5 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=5f30f0716dfdd0d91eb439ebec522ec2 \ file://gtk/gtk.h;endline=25;md5=1d8dc0fccdbfa26287a271dce88af737 \ file://gdk/gdk.h;endline=25;md5=c920ce39dc88c6f06d3e7c50e08086f2 \ file://tests/testgtk.c;endline=25;md5=cb732daee1d82af7a2bf953cf3cf26f1" + +CVE_PRODUCT = "gnome:gtk" diff --git a/meta/recipes-gnome/gtk+/gtk4_4.12.3.bb b/meta/recipes-gnome/gtk+/gtk4_4.12.3.bb index 001b06934e..2c85e7e75f 100644 --- a/meta/recipes-gnome/gtk+/gtk4_4.12.3.bb +++ b/meta/recipes-gnome/gtk+/gtk4_4.12.3.bb @@ -41,6 +41,8 @@ SRC_URI[sha256sum] = "148ce262f6c86487455fb1d9793c3f58bc3e1da477a29617fadb0420f5 S = "${WORKDIR}/gtk-${PV}" +CVE_PRODUCT = "gnome:gtk" + inherit meson gettext pkgconfig gi-docgen update-alternatives gsettings features_check gobject-introspection # TBD: nativesdk -- cgit v1.2.3-54-g00ecf