Skip to contentSkip to conversation

subversion: set CVE vendor to Apache

PATCH New Ross Burton 1 participant 4 messages Jul 17, 2019

lore
Share & tools
lore

Ross Burton

author
#0 lore raw

PATCH 1/4 subversion: set CVE vendor to Apache

There's a Jenkins plugin for Subversion.

Signed-off-by Ross Burton <[email protected]>
---
 meta/recipes-devtools/subversion/subversion_1.12.0.bb | 2 ++
 1 file changed, 2 insertions(+)
meta/recipes-devtools/subversion/subversion_1.12.0.bb +2 -0
index f059ff9ffac..3d0f3e688db 100644
@@ -19,6 +19,8 @@ SRC_URI[sha256sum] = "7fae7c73d8a007c107c0ae5eb372bc0bb013dbfe966fcd5c59cd5a195a
 
 inherit autotools pkgconfig gettext
 
+CVE_PRODUCT = "apache:subversion"
+
 PACKAGECONFIG ?= ""
 
 PACKAGECONFIG[sasl] = "--with-sasl,--without-sasl,cyrus-sasl"
Signature · 1 line
2.20.1
author
#1 lore raw

PATCH 2/4 boost: set CVE vendor to Boost

There's a Boost module for Drupal.

Signed-off-by Ross Burton <[email protected]>
---
 meta/recipes-support/boost/boost.inc | 2 ++
 1 file changed, 2 insertions(+)
meta/recipes-support/boost/boost.inc +2 -0
index 9be3717fd65..0330202586f 100644
@@ -2,6 +2,8 @@ SUMMARY = "Free peer-reviewed portable C++ source libraries"
 SECTION = "libs"
 DEPENDS = "bjam-native zlib bzip2"
 
+CVE_PRODUCT = "boost:boost"
+
 ARM_INSTRUCTION_SET_armv4 = "arm"
 ARM_INSTRUCTION_SET_armv5 = "arm"
Signature · 1 line
2.20.1
author
#2 lore raw

PATCH 3/4 git: set CVE vendor to git-scm

In reply to Ross Burton

There's a Jenkins plugin for Git.

Signed-off-by Ross Burton <[email protected]>
---
 meta/recipes-devtools/git/git.inc | 2 ++
 1 file changed, 2 insertions(+)
meta/recipes-devtools/git/git.inc +2 -0
index 26a22ac1e84..6e137432f0a 100644
@@ -13,6 +13,8 @@ S = "${WORKDIR}/git-${PV}"
 
 LIC_FILES_CHKSUM = "file://COPYING;md5=7c0d7ef03a7eb04ce795b0f60e68e7e1"
 
+CVE_PRODUCT = "git-scm:git"
+
 PACKAGECONFIG ??= ""
 PACKAGECONFIG[cvsserver] = ""
 PACKAGECONFIG[svn] = ""
Signature · 1 line
2.20.1
author
#3 lore raw

PATCH 4/4 ed: set CVE vendor to avoid false positives

In reply to Ross Burton
Signed-off-by Ross Burton <[email protected]>
---
 meta/recipes-extended/ed/ed_1.15.bb | 2 ++
 1 file changed, 2 insertions(+)
meta/recipes-extended/ed/ed_1.15.bb +2 -0
index c79310325f5..886c3ddcab6 100644
@@ -9,6 +9,8 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=0c7051aef9219dc7237f206c5c4179a7 \
 
 SECTION = "base"
 
+CVE_PRODUCT = "gnu:ed"
+
 # LSB states that ed should be in /bin/
 bindir = "${base_bindir}"
Signature · 1 line
2.20.1