Hi Randy, Thank you for your review. I will reflect your comments and post v2.
Best regards. -- Ken Kurematsu <[email protected]> From: Randy MacLeod <[email protected]> Sent: Tuesday, December 23, 2025 3:58 AM To: Ken Kurematsu <[email protected]>; [email protected] Cc: Masahiro Mizutani <[email protected]>; Yoshitaka Ikeda <[email protected]> Subject: Re: [OE-core] [PATCH] libtheora: set CVE_PRODUCT Hi Ken, On 2025-12-18 11:01 p.m., Ken Kurematsu via lists.openembedded.org wrote: In the NVD database, the product name of libtheora is theora. This was set to ensure that cve-check works correctly. Signed-off-by: Ken Kurematsu <[email protected]><mailto:[email protected]> --- meta/recipes-multimedia/libtheora/libtheora_1.2.0.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-multimedia/libtheora/libtheora_1.2.0.bb b/meta/recipes-multimedia/libtheora/libtheora_1.2.0.bb index 04de8507fb..bacaf3aee6 100644 --- a/meta/recipes-multimedia/libtheora/libtheora_1.2.0.bb +++ b/meta/recipes-multimedia/libtheora/libtheora_1.2.0.bb @@ -14,6 +14,8 @@ SRC_URI[sha256sum] = "ebdf77a8f5c0a8f7a9e42323844fa09502b34eb1d1fece7b5f54da41fe UPSTREAM_CHECK_REGEX = "libtheora-(?P<pver>\d+(\.\d)+)\.(tar\.gz|tgz)" +CVE_PRODUCT = "theora" + >From YP patch review, Please use: CVE_PRODUCT += "theora" to catch both libtheora and theora Thanks, ../Randy inherit autotools pkgconfig EXTRA_OECONF = "--disable-examples --disable-doc" -- # Randy MacLeod # Wind River Linux
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#228442): https://lists.openembedded.org/g/openembedded-core/message/228442 Mute This Topic: https://lists.openembedded.org/mt/116854732/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
