Currently, CVE_PRODUCT only detects vulnerabilities where the product is 
"ffmpeg".

However, there are also vulnerabilities where the product is "libswresample", 
as shown below.
https://app.opencve.io/cve/?vendor=ffmpeg&product=libswresample

Therefore, add "libswresample" to CVE_PRODUCT to detect vulnerabilities
where the product is "libswresample" as well.

Signed-off-by: Shinji Matsunaga <shin.matsun...@fujitsu.com>
---
 meta/recipes-multimedia/ffmpeg/ffmpeg_7.0.2.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta/recipes-multimedia/ffmpeg/ffmpeg_7.0.2.bb 
b/meta/recipes-multimedia/ffmpeg/ffmpeg_7.0.2.bb
index 9e60b5cd23..d80fe03794 100644
--- a/meta/recipes-multimedia/ffmpeg/ffmpeg_7.0.2.bb
+++ b/meta/recipes-multimedia/ffmpeg/ffmpeg_7.0.2.bb
@@ -190,3 +190,5 @@ INSANE_SKIP:${MLPREFIX}libavutil = "textrel"
 INSANE_SKIP:${MLPREFIX}libswscale = "textrel"
 INSANE_SKIP:${MLPREFIX}libswresample = "textrel"
 INSANE_SKIP:${MLPREFIX}libpostproc = "textrel"
+
+CVE_PRODUCT:append = " libswresample"
-- 
2.25.1

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#205097): 
https://lists.openembedded.org/g/openembedded-core/message/205097
Mute This Topic: https://lists.openembedded.org/mt/108731705/21656
Group Owner: openembedded-core+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to