[scarthgap,05/16] orc: set CVE_PRODUCT

Message ID	3977b007727e7029dabff0394f12dc4190e29aaa.1753392770.git.steve@sakoman.com
State	Superseded
Delegated to:	Steve Sakoman
Headers	show Return-Path: <steve@sakoman.com> ip: 209.85.210.171, mailfrom: steve@sakoman.com) From: Steve Sakoman <steve@sakoman.com> To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 05/16] orc: set CVE_PRODUCT Date: Thu, 24 Jul 2025 14:35:21 -0700 Message-ID: <3977b007727e7029dabff0394f12dc4190e29aaa.1753392770.git.steve@sakoman.com> In-Reply-To: <cover.1753392770.git.steve@sakoman.com> References: <cover.1753392770.git.steve@sakoman.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[scarthgap,01/16] libxml2: fix CVE-2025-49795 \| expand [scarthgap,01/16] libxml2: fix CVE-2025-49795 [scarthgap,02/16] binutils: Fix CVE-2025-7546 [scarthgap,03/16] binutils: Fix CVE-2025-7545 [scarthgap,04/16] sqlite3: fix CVE-2025-6965 [scarthgap,05/16] orc: set CVE_PRODUCT [scarthgap,06/16] openssl: CVE-2024-41996 [scarthgap,07/16] openssl: patch CVE-2025-27587 [scarthgap,08/16] libpam: fix CVE-2025-6020 [scarthgap,09/16] glibc: stable 2.39 branch updates [scarthgap,10/16] xserver-xorg: upgrade 21.1.6 -> 21.1.18 [scarthgap,11/16] mtools: upgrade 4.0.43 -> 4.0.44 [scarthgap,12/16] mtools: upgrade 4.0.44 -> 4.0.45 [scarthgap,13/16] mtools: upgrade 4.0.45 -> 4.0.46 [scarthgap,14/16] mtools: upgrade 4.0.46 -> 4.0.47 [scarthgap,15/16] mtools: upgrade 4.0.47 -> 4.0.48 [scarthgap,16/16] mtools: upgrade 4.0.48 -> 4.0.49

Message ID

3977b007727e7029dabff0394f12dc4190e29aaa.1753392770.git.steve@sakoman.com

State

Superseded

Delegated to:

Steve Sakoman

Headers

From: Steve Sakoman <steve@sakoman.com>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][scarthgap 05/16] orc: set CVE_PRODUCT
Date: Thu, 24 Jul 2025 14:35:21 -0700
Message-ID: 
 <3977b007727e7029dabff0394f12dc4190e29aaa.1753392770.git.steve@sakoman.com>
In-Reply-To: <cover.1753392770.git.steve@sakoman.com>
References: <cover.1753392770.git.steve@sakoman.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[scarthgap,01/16] libxml2: fix CVE-2025-49795 | expand

Commit Message

Steve Sakoman July 24, 2025, 9:35 p.m. UTC

From: Peter Marko <peter.marko@siemens.com>

There are new CVEs reported for this recipe which are not for this
componene, but for a component with same name from apache.

sqlite> select vendor, product, id, count(*) from products where product like 'orc' group by vendor, product, id;
apache|orc|CVE-2018-8015|1
apache|orc|CVE-2025-47436|4
gstreamer|orc|CVE-2024-40897|1

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
 meta/recipes-devtools/orc/orc_0.4.40.bb | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/meta/recipes-devtools/orc/orc_0.4.40.bb b/meta/recipes-devtools/orc/orc_0.4.40.bb
index e437831cd7..ee96ca0a4c 100644
--- a/meta/recipes-devtools/orc/orc_0.4.40.bb
+++ b/meta/recipes-devtools/orc/orc_0.4.40.bb
@@ -9,6 +9,9 @@  SRC_URI[sha256sum] = "3fc2bee78dfb7c41fd9605061fc69138db7df007eae2f669a1f56e8bac
 
 inherit meson pkgconfig gtk-doc
 
+# distinguish from apache:orc
+CVE_PRODUCT = "gstreamer:orc"
+
 GTKDOC_MESON_OPTION = "gtk_doc"
 GTKDOC_MESON_ENABLE_FLAG = "enabled"
 GTKDOC_MESON_DISABLE_FLAG = "disabled"

[scarthgap,05/16] orc: set CVE_PRODUCT

Commit Message

Patch