From patchwork Sun Feb 4 14:06:59 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Robert Joslyn X-Patchwork-Id: 38807 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 1687FC48286 for ; Sun, 4 Feb 2024 14:07:19 +0000 (UTC) Received: from mailout-l3b-97.contactoffice.com (mailout-l3b-97.contactoffice.com [212.3.242.97]) by mx.groups.io with SMTP id smtpd.web10.38902.1707055636314816481 for ; Sun, 04 Feb 2024 06:07:16 -0800 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: message contains an insecure body length tag" header.i=robert.joslyn@redrectangle.org header.s=20230812-3u04 header.b=t1Ah+ft8; spf=pass (domain: redrectangle.org, ip: 212.3.242.97, mailfrom: robert.joslyn@redrectangle.org) Received: from smtpauth1.co-bxl (smtpauth1.co-bxl [10.2.0.15]) by mailout-l3b-97.contactoffice.com (Postfix) with ESMTP id 40A0491D; Sun, 4 Feb 2024 15:07:13 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1707055633; s=20230812-3u04; d=redrectangle.org; i=robert.joslyn@redrectangle.org; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version:Content-Transfer-Encoding; l=1504; bh=rAkbPdkIZa29w1iMsXOSO4Y+S+Erw/aZT3dKZGD3lbo=; b=t1Ah+ft8xEkQc6g7mevVNcJVyTa44Of0JHcmV1SlM3j/247WsCygK1mZMx/uDG2j Ej+g0NYF/SHjePnvrtYxjczMiIQd1rh6mkuJEgYZ0NlwHSYBZ5y5XpjYsqBlbqvaL5y 0zBTAJnT1nyCBPTU0e4D7i6kWqv7mTOdW8ZU4S+yXu7mwxtljEeTNb6gr+yRk4qv6Oh zxE12sp/d/PidTv9IxW9otTjH7Mi1Uk5ATw7qCzaiUdrtyScgzbNrPXOhXs9LZi7T5/ qKD2YOjSp8CgY7x4+BLDsxWAauaY+W8kVCVNIX19O2CvxCyMSCJMHXSPFiyyPt18IKg a+knEhYfoA== Received: by smtp.mailfence.com with ESMTPSA ; Sun, 4 Feb 2024 15:07:11 +0100 (CET) From: robert.joslyn@redrectangle.org To: openembedded-core@lists.openembedded.org Cc: Robert Joslyn Subject: [PATCH] gtk: Set CVE_PRODUCT Date: Sun, 4 Feb 2024 06:06:59 -0800 Message-ID: <20240204140659.805664-1-robert.joslyn@redrectangle.org> X-Mailer: git-send-email 2.43.0 MIME-Version: 1.0 X-ContactOffice-Account: com:454140407 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sun, 04 Feb 2024 14:07:19 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/194887 From: Robert Joslyn The CPE vendor is "gnome" and the CPE product is "gtk" for both gtk+3 and gtk4 recipes. Set CVE_PRODUCT so we properly match the NVD database. Signed-off-by: Robert Joslyn --- meta/recipes-gnome/gtk+/gtk+3_3.24.38.bb | 2 ++ meta/recipes-gnome/gtk+/gtk4_4.12.5.bb | 2 ++ 2 files changed, 4 insertions(+) diff --git a/meta/recipes-gnome/gtk+/gtk+3_3.24.38.bb b/meta/recipes-gnome/gtk+/gtk+3_3.24.38.bb index 37fa0a7290..c23c46a689 100644 --- a/meta/recipes-gnome/gtk+/gtk+3_3.24.38.bb +++ b/meta/recipes-gnome/gtk+/gtk+3_3.24.38.bb @@ -13,3 +13,5 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=5f30f0716dfdd0d91eb439ebec522ec2 \ file://gtk/gtk.h;endline=25;md5=1d8dc0fccdbfa26287a271dce88af737 \ file://gdk/gdk.h;endline=25;md5=c920ce39dc88c6f06d3e7c50e08086f2 \ file://tests/testgtk.c;endline=25;md5=cb732daee1d82af7a2bf953cf3cf26f1" + +CVE_PRODUCT = "gnome:gtk" diff --git a/meta/recipes-gnome/gtk+/gtk4_4.12.5.bb b/meta/recipes-gnome/gtk+/gtk4_4.12.5.bb index 65ac1071f8..a418ef878f 100644 --- a/meta/recipes-gnome/gtk+/gtk4_4.12.5.bb +++ b/meta/recipes-gnome/gtk+/gtk4_4.12.5.bb @@ -41,6 +41,8 @@ SRC_URI[sha256sum] = "28b356d590ee68ef626e2ef9820b2dd21441484a9a042a5a3f0c40e9df S = "${WORKDIR}/gtk-${PV}" +CVE_PRODUCT = "gnome:gtk" + inherit meson gettext pkgconfig gi-docgen update-alternatives gsettings features_check gobject-introspection # TBD: nativesdk