[Buildroot] [PATCH 01/15] package/iwd: add IWD_CPE_ID_VENDOR and IWD_CPE_ID_NAME

[Buildroot] [PATCH 01/15] package/iwd: add IWD_CPE_ID_VENDOR and IWD_CPE_ID_NAME

[Heiko Thiery]

cpe:2.3:a:intel:inet_wireless_daemon is a valid CPE identifier for this package:

https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=iwd

Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com>
---
 package/iwd/iwd.mk | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/package/iwd/iwd.mk b/package/iwd/iwd.mk
index b164970196..db98c02b58 100644
--- a/package/iwd/iwd.mk
+++ b/package/iwd/iwd.mk
@@ -9,6 +9,8 @@ IWD_SITE = https://git.kernel.org/pub/scm/network/wireless/iwd.git
 IWD_SITE_METHOD = git
 IWD_LICENSE = LGPL-2.1+
 IWD_LICENSE_FILES = COPYING
+IWD_CPE_ID_VENDOR = intel
+IWD_CPE_ID_NAME = inet_wireless_daemon
 # sources from git, no configure script provided
 IWD_AUTORECONF = YES
 IWD_SELINUX_MODULES = networkmanager
-- 
2.30.0

[Buildroot] [PATCH 02/15] package/alsa-lib: add ALSA_LIB_CPE_ID_VENDOR

[Heiko Thiery]

cpe:2.3:a:alsa-project:alsa-lib is a valid CPE identifier for this
package:

https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=alsa-lib

Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com>
---
 package/alsa-lib/alsa-lib.mk | 1 +
 1 file changed, 1 insertion(+)

diff --git a/package/alsa-lib/alsa-lib.mk b/package/alsa-lib/alsa-lib.mk
index 728aec31a1..b1bfaf30e5 100644
--- a/package/alsa-lib/alsa-lib.mk
+++ b/package/alsa-lib/alsa-lib.mk
@@ -9,6 +9,7 @@ ALSA_LIB_SOURCE = alsa-lib-$(ALSA_LIB_VERSION).tar.bz2
 ALSA_LIB_SITE = https://www.alsa-project.org/files/pub/lib
 ALSA_LIB_LICENSE = LGPL-2.1+ (library), GPL-2.0+ (aserver)
 ALSA_LIB_LICENSE_FILES = COPYING aserver/COPYING
+ALSA_LIB_CPE_ID_VENDOR = alsa-project
 ALSA_LIB_INSTALL_STAGING = YES
 ALSA_LIB_CFLAGS = $(TARGET_CFLAGS)
 ALSA_LIB_AUTORECONF = YES
-- 
2.30.0

[Buildroot] [PATCH 03/15] package/angularjs: add ANGULARJS_CPE_ID_VENDOR and ANGULARJS_CPE_ID_NAME

[Heiko Thiery]

cpe:2.3:a:angularjs:angular.js is a valid CPE identifier for this
package:

https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=angularjs

Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com>
---
 package/angularjs/angularjs.mk | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/package/angularjs/angularjs.mk b/package/angularjs/angularjs.mk
index a9bee02162..4c414c74fe 100644
--- a/package/angularjs/angularjs.mk
+++ b/package/angularjs/angularjs.mk
@@ -10,6 +10,8 @@ ANGULARJS_SITE = https://code.angularjs.org/$(ANGULARJS_VERSION)
 ANGULARJS_LICENSE = MIT
 # There's no separate license file in the archive, so use angular.js instead.
 ANGULARJS_LICENSE_FILES = angular.js
+ANGULARJS_CPE_ID_VENDOR = angularjs
+ANGULARJS_CPE_ID_NAME = angular.js
 
 define ANGULARJS_EXTRACT_CMDS
 	unzip $(ANGULARJS_DL_DIR)/$(ANGULARJS_SOURCE) -d $(@D)
-- 
2.30.0

[Buildroot] [PATCH 04/15] package/rauc: add RAUC_CPE_ID_VENDOR

[Heiko Thiery]

cpe:2.3:a:pengutronix:rauc is a valid CPE identifier for this package:

https://nvd.nist.gov/products/cpe/detail/850005?namingFormat=2.3&orderBy=CPEURI&keyword=rauc&status=FINAL

Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com>
---
 package/rauc/rauc.mk | 1 +
 1 file changed, 1 insertion(+)

diff --git a/package/rauc/rauc.mk b/package/rauc/rauc.mk
index fd39f000a8..51087e9f36 100644
--- a/package/rauc/rauc.mk
+++ b/package/rauc/rauc.mk
@@ -9,6 +9,7 @@ RAUC_SITE = https://github.com/rauc/rauc/releases/download/v$(RAUC_VERSION)
 RAUC_SOURCE = rauc-$(RAUC_VERSION).tar.xz
 RAUC_LICENSE = LGPL-2.1
 RAUC_LICENSE_FILES = COPYING
+RAUC_CPE_ID_VENDOR = pengutronix
 RAUC_DEPENDENCIES = host-pkgconf openssl libglib2 dbus
 
 ifeq ($(BR2_PACKAGE_RAUC_NETWORK),y)
-- 
2.30.0

[Buildroot] [PATCH 05/15] package/apache: add APACHE_CPE_ID_VENDOR and APACHE_CPE_ID_NAME

[Heiko Thiery]

cpe:2.3:a:apache:http_server is a valid CPE identifier for this package:

https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aapache%3Ahttp_server

Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com>
---
 package/apache/apache.mk | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/package/apache/apache.mk b/package/apache/apache.mk
index 203d637fbb..0392e76144 100644
--- a/package/apache/apache.mk
+++ b/package/apache/apache.mk
@@ -9,6 +9,8 @@ APACHE_SOURCE = httpd-$(APACHE_VERSION).tar.bz2
 APACHE_SITE = http://archive.apache.org/dist/httpd
 APACHE_LICENSE = Apache-2.0
 APACHE_LICENSE_FILES = LICENSE
+APACHE_CPE_ID_VENDOR = apache
+APACHE_CPE_ID_NAME = http_server
 # Needed for mod_php
 APACHE_INSTALL_STAGING = YES
 # We have a patch touching configure.in and Makefile.in,
-- 
2.30.0

[Buildroot] [PATCH 06/15] package/libssh: add LIBSSH_CPE_ID_VENDOR

[Heiko Thiery]

cpe:2.3:a:libssh:libssh is a valid CPE identifier for this package:

https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Alibssh%3Alibssh

Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com>
---
 package/libssh/libssh.mk | 1 +
 1 file changed, 1 insertion(+)

diff --git a/package/libssh/libssh.mk b/package/libssh/libssh.mk
index 67e3ad9f91..c8cb821616 100644
--- a/package/libssh/libssh.mk
+++ b/package/libssh/libssh.mk
@@ -10,6 +10,7 @@ LIBSSH_SOURCE = libssh-$(LIBSSH_VERSION).tar.xz
 LIBSSH_SITE = https://www.libssh.org/files/$(LIBSSH_VERSION_MAJOR)
 LIBSSH_LICENSE = LGPL-2.1
 LIBSSH_LICENSE_FILES = COPYING
+LIBSSH_CPE_ID_VENDOR = libssh
 LIBSSH_INSTALL_STAGING = YES
 LIBSSH_SUPPORTS_IN_SOURCE_BUILD = NO
 LIBSSH_CONF_OPTS = \
-- 
2.30.0

[Buildroot] [PATCH 07/15] package/cifs-utils: add CIFS_UTILS_CPE_ID_VENDOR

[Heiko Thiery]

cpe:2.3:a:samba:cifs-utils is a valid CPE identifier for this package:

https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Asamba%3Acifs-utils

Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com>
---
 package/cifs-utils/cifs-utils.mk | 1 +
 1 file changed, 1 insertion(+)

diff --git a/package/cifs-utils/cifs-utils.mk b/package/cifs-utils/cifs-utils.mk
index b06ce7dddf..63b454413c 100644
--- a/package/cifs-utils/cifs-utils.mk
+++ b/package/cifs-utils/cifs-utils.mk
@@ -9,6 +9,7 @@ CIFS_UTILS_SOURCE = cifs-utils-$(CIFS_UTILS_VERSION).tar.bz2
 CIFS_UTILS_SITE = http://ftp.samba.org/pub/linux-cifs/cifs-utils
 CIFS_UTILS_LICENSE = GPL-3.0+
 CIFS_UTILS_LICENSE_FILES = COPYING
+CIFS_UTILS_CPE_ID_VENDOR = samba
 # Missing install-sh in release tarball and patching Makefile.am
 CIFS_UTILS_AUTORECONF = YES
 CIFS_UTILS_DEPENDENCIES = host-pkgconf
-- 
2.30.0

[Buildroot] [PATCH 08/15] package/samba4: add SAMBA4_CPE_ID_VENDOR and SAMBA4_CPE_ID_NAME

[Heiko Thiery]

cpe:2.3:a:samba:samba is a valid CPE identifier for this package:

https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Asamba%3Asamba

Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com>
---
 package/samba4/samba4.mk | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/package/samba4/samba4.mk b/package/samba4/samba4.mk
index bdf6a30093..4b4611d3e1 100644
--- a/package/samba4/samba4.mk
+++ b/package/samba4/samba4.mk
@@ -10,6 +10,8 @@ SAMBA4_SOURCE = samba-$(SAMBA4_VERSION).tar.gz
 SAMBA4_INSTALL_STAGING = YES
 SAMBA4_LICENSE = GPL-3.0+
 SAMBA4_LICENSE_FILES = COPYING
+SAMBA4_CPE_ID_VENDOR = samba
+SAMBA4_CPE_ID_NAME = samba
 SAMBA4_DEPENDENCIES = \
 	host-e2fsprogs host-heimdal host-nfs-utils host-python3 \
 	cmocka e2fsprogs gnutls popt zlib \
-- 
2.30.0

[Buildroot] [PATCH 09/15] package/cjson: set CJSON_CPE_ID_VALID

[Heiko Thiery]

cpe:2.3:a:cjson_project:cjson is a valid CPE identifier for this
package:

https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cjson

Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com>
---
 package/cjson/cjson.mk | 1 +
 1 file changed, 1 insertion(+)

diff --git a/package/cjson/cjson.mk b/package/cjson/cjson.mk
index 31fef74d9b..4bfab3b646 100644
--- a/package/cjson/cjson.mk
+++ b/package/cjson/cjson.mk
@@ -9,6 +9,7 @@ CJSON_SITE = $(call github,DaveGamble,cjson,v$(CJSON_VERSION))
 CJSON_INSTALL_STAGING = YES
 CJSON_LICENSE = MIT
 CJSON_LICENSE_FILES = LICENSE
+CJSON_CPE_ID_VALID = YES
 # Set ENABLE_CUSTOM_COMPILER_FLAGS to OFF in particular to disable
 # -fstack-protector-strong which depends on BR2_TOOLCHAIN_HAS_SSP
 CJSON_CONF_OPTS += \
-- 
2.30.0

[Buildroot] [PATCH 10/15] package/jansson: add JANSSON_CPE_ID_VALID

[Heiko Thiery]

cpe:2.3:a:jansson_project:jansson is a valid CPE identifier for this
package:

https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Ajansson_project%3Ajansson

Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com>
---
 package/jansson/jansson.mk | 1 +
 1 file changed, 1 insertion(+)

diff --git a/package/jansson/jansson.mk b/package/jansson/jansson.mk
index 83fb370160..4ac64b69ef 100644
--- a/package/jansson/jansson.mk
+++ b/package/jansson/jansson.mk
@@ -8,6 +8,7 @@ JANSSON_VERSION = 2.13.1
 JANSSON_SITE = http://www.digip.org/jansson/releases
 JANSSON_LICENSE = MIT
 JANSSON_LICENSE_FILES = LICENSE
+JANSSON_CPE_ID_VALID = YES
 JANSSON_INSTALL_STAGING = YES
 JANSSON_CONF_ENV = LIBS="-lm"
 
-- 
2.30.0

[Buildroot] [PATCH 11/15] package/wireshark: add WIRESHARK_CPE_ID_VENDOR

[Heiko Thiery]

cpe:2.3:a:wireshark:wireshark is a valid CPE identifier for this
package:

https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Awireshark%3Awireshark

Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com>
---
 package/wireshark/wireshark.mk | 1 +
 1 file changed, 1 insertion(+)

diff --git a/package/wireshark/wireshark.mk b/package/wireshark/wireshark.mk
index 84dfe74948..de29417ccd 100644
--- a/package/wireshark/wireshark.mk
+++ b/package/wireshark/wireshark.mk
@@ -9,6 +9,7 @@ WIRESHARK_SOURCE = wireshark-$(WIRESHARK_VERSION).tar.xz
 WIRESHARK_SITE = https://www.wireshark.org/download/src/all-versions
 WIRESHARK_LICENSE = wireshark license
 WIRESHARK_LICENSE_FILES = COPYING
+WIRESHARK_CPE_ID_VENDOR = wireshark
 WIRESHARK_DEPENDENCIES = \
 	c-ares \
 	host-pkgconf \
-- 
2.30.0

[Buildroot] [PATCH 12/15] package/aircrack-ng: add AIRCRACK_NG_CPE_ID_VENDOR

[Heiko Thiery]

cpe:2.3:a:aircrack-ng:aircrack-ng is a valid CPE identifier for this
package:

https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aaircrack-ng%3Aaircrack-ng

Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com>
---
 package/aircrack-ng/aircrack-ng.mk | 1 +
 1 file changed, 1 insertion(+)

diff --git a/package/aircrack-ng/aircrack-ng.mk b/package/aircrack-ng/aircrack-ng.mk
index baa1fad9e1..ff87766d6f 100644
--- a/package/aircrack-ng/aircrack-ng.mk
+++ b/package/aircrack-ng/aircrack-ng.mk
@@ -8,6 +8,7 @@ AIRCRACK_NG_VERSION = 1.6
 AIRCRACK_NG_SITE = http://download.aircrack-ng.org
 AIRCRACK_NG_LICENSE = GPL-2.0+
 AIRCRACK_NG_LICENSE_FILES = LICENSE
+AIRCRACK_NG_CPE_ID_VENDOR = aircrack-ng
 AIRCRACK_NG_DEPENDENCIES = \
 	$(if $(BR2_PACKAGE_CMOCKA),cmocka) \
 	$(if $(BR2_PACKAGE_LIBNL),libnl) \
-- 
2.30.0

[Buildroot] [PATCH 13/15] package/apparmor: add APPARMOR_CPE_ID_VENDOR

[Heiko Thiery]

cpe:2.3:a:canonical:apparmor is a valid CPE identifier for this package:

https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Acanonical%3Aapparmor

Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com>
---
 package/apparmor/apparmor.mk | 1 +
 1 file changed, 1 insertion(+)

diff --git a/package/apparmor/apparmor.mk b/package/apparmor/apparmor.mk
index 7ea0fabd91..7819d0b7af 100644
--- a/package/apparmor/apparmor.mk
+++ b/package/apparmor/apparmor.mk
@@ -11,6 +11,7 @@ APPARMOR_SITE = https://launchpad.net/apparmor/$(APPARMOR_VERSION_MAJOR)/$(APPAR
 APPARMOR_DL_SUBDIR = libapparmor
 APPARMOR_LICENSE = GPL-2.0
 APPARMOR_LICENSE_FILES = LICENSE parser/COPYING.GPL
+APPARMOR_CPE_ID_VENDOR = canonical
 
 APPARMOR_DEPENDENCIES = libapparmor
 
-- 
2.30.0

[Buildroot] [PATCH 14/15] package/libjpeg: add LIBJPEG_CPE_ID_VENDOR

[Heiko Thiery]

cpe:2.3:a:ijg:libjpeg is a valid CPE identifier for this package:

https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aijg%3Alibjpeg

Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com>
---
 package/libjpeg/libjpeg.mk | 1 +
 1 file changed, 1 insertion(+)

diff --git a/package/libjpeg/libjpeg.mk b/package/libjpeg/libjpeg.mk
index b855344f3c..389ecb6299 100644
--- a/package/libjpeg/libjpeg.mk
+++ b/package/libjpeg/libjpeg.mk
@@ -10,6 +10,7 @@ LIBJPEG_SOURCE = jpegsrc.v$(LIBJPEG_VERSION).tar.gz
 LIBJPEG_LICENSE = IJG
 LIBJPEG_LICENSE_FILES = README
 LIBJPEG_INSTALL_STAGING = YES
+LIBJPEG_CPE_ID_VENDOR = ijg
 LIBJPEG_PROVIDES = jpeg
 
 define LIBJPEG_REMOVE_USELESS_TOOLS
-- 
2.30.0

[Buildroot] [PATCH 01/15] package/iwd: add IWD_CPE_ID_VENDOR and IWD_CPE_ID_NAME

[Thomas Petazzoni]

On Thu, 21 Jan 2021 14:36:25 +0100
Heiko Thiery <heiko.thiery@gmail.com> wrote:

> cpe:2.3:a:intel:inet_wireless_daemon is a valid CPE identifier for this package:
> 
> https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=iwd
> 
> Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com>
> ---
>  package/iwd/iwd.mk | 2 ++
>  1 file changed, 2 insertions(+)

I've applied the entire series. However, your series was supposed to
have 15 patches, but the PATCH 15/15 never made it to the mailing list.
Is this expected ?

Thanks!

Thomas
-- 
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com

[Buildroot] [PATCH 01/15] package/iwd: add IWD_CPE_ID_VENDOR and IWD_CPE_ID_NAME

[Heiko Thiery]

Hi Thomas,

Am Do., 21. Jan. 2021 um 22:04 Uhr schrieb Thomas Petazzoni
<thomas.petazzoni@bootlin.com>:
>
> On Thu, 21 Jan 2021 14:36:25 +0100
> Heiko Thiery <heiko.thiery@gmail.com> wrote:
>
> > cpe:2.3:a:intel:inet_wireless_daemon is a valid CPE identifier for this package:
> >
> > https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=iwd
> >
> > Signed-off-by: Heiko Thiery <heiko.thiery@gmail.com>
> > ---
> >  package/iwd/iwd.mk | 2 ++
> >  1 file changed, 2 insertions(+)
>
> I've applied the entire series. However, your series was supposed to
> have 15 patches, but the PATCH 15/15 never made it to the mailing list.
> Is this expected ?

You're right .. that was not expected. I sent patch #15 now.

Thank you.

-- 
Heiko