@@ -13,6 +13,8 @@ URLV = "${@d.getVar('PV')[0:4]}.${@d.getVar('PV')[4:6]}.${@d.getVar('PV')[6:8]}"
SRC_URI = "https://download.videolan.org/pub/contrib/live555/live.${URLV}.tar.gz \
file://config.linux-cross"
+CVE_PRODUCT = "live555 live555_media_server live555:streaming_media live555:liblivemedia"
+
# only latest live version stays on http://www.live555.com/liveMedia/public/, add mirror for older
MIRRORS += "http://www.live555.com/liveMedia/public/ http://download.videolan.org/contrib/live555/ \n"
live555 is an old project, it has multiple CPEs associated with. Set the ones in CVE_PRODUCT that are still active. See CVE db query: sqlite> select vendor, product, count(*) from products where vendor like '%live555%' or product like '%live555%' group by 1, 2; live555|liblivemedia|1 live555|live555|7 live555|live555_media_server|2 live555|media_server|1 live555|streaming_media|160 All of them are relevant to this recipe, although media_server hasn't been used since 2007, that one wasn't set. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> --- meta-oe/recipes-multimedia/live555/live555_20210824.bb | 2 ++ 1 file changed, 2 insertions(+)