contrib: add CPE information on packages

Added "cpe" field in package.json and PKG_CVE for make rules.
GitLab: #1021

Change-Id: I375fe3c224b0578ed702877d236fbc8ed0a5d8d5
This commit is contained in:
Louis Maillard
2024-06-27 16:39:01 -04:00
parent c9f251d797
commit d84d0c42ec
60 changed files with 71 additions and 8 deletions

View File

@ -1,6 +1,7 @@
{
"name": "argon2",
"version": "670229c849b9fe882583688b74eb7dfdc846f9f6",
"cpe": "cpe:2.3:a:argon2_project:argon2:-:*:*:*:*:*:*:*",
"url": "https://github.com/P-H-C/phc-winner-argon2/archive/__VERSION__.tar.gz",
"deps": [],
"patches": [],

View File

@ -1,5 +1,6 @@
# ARGON2
ARGON2_VERSION := 16d3df698db2486dde480b09a732bf9bf48599f9
PKG_CPE += cpe:2.3:a:argon2_project:argon2:-:*:*:*:*:*:*:*
ARGON2_URL := https://github.com/P-H-C/phc-winner-argon2/archive/$(ARGON2_VERSION).tar.gz
ifeq ($(call need_pkg,'libargon2 > 20161029'),)

View File

@ -1,6 +1,7 @@
{
"name": "asio",
"version": "asio-1-28-1",
"cpe": "cpe:2.3:a:*:asio:1.28.1:*:*:*:*:*:*:*",
"url": "https://github.com/chriskohlhoff/asio/archive/__VERSION__.tar.gz",
"deps": ["openssl"],
"patches": [],

View File

@ -19,6 +19,7 @@
#
ASIO_VERSION := asio-1-28-1
PKG_CPE += cpe:2.3:a:*:asio:1.28.1:*:*:*:*:*:*:*
ASIO_URL := https://github.com/chriskohlhoff/asio/archive/$(ASIO_VERSION).tar.gz
# Pure dependency of restinio: do not add to PKGS.

View File

@ -1,6 +1,7 @@
{
"name": "ffmpeg",
"version": "6.0.1",
"cpe": "cpe:2.3:a:ffmpeg:ffmpeg:6.0.1:*:*:*:*:*:*:*",
"url": "https://ffmpeg.org/releases/ffmpeg-__VERSION__.tar.xz",
"deps": [
"vpx",

View File

@ -1,4 +1,5 @@
FFMPEG_HASH := 6.0.1
PKG_CPE += cpe:2.3:a:ffmpeg:ffmpeg:6.0.1:*:*:*:*:*:*:*
FFMPEG_URL := https://ffmpeg.org/releases/ffmpeg-$(FFMPEG_HASH).tar.xz
PKGS+=ffmpeg

View File

@ -1,6 +1,7 @@
{
"name": "ffnvcodec",
"version": "n11.1.5.2",
"cpe": "cpe:2.3:a:videolan:ffnvcodec:11.1.5.2:*:*:*:*:*:*:*",
"url": "https://github.com/FFmpeg/nv-codec-headers/archive/__VERSION__.tar.gz",
"deps": [],
"patches": [],

View File

@ -1,5 +1,6 @@
# ffnvcodec
FFNVCODEC_VERSION := n11.1.5.2
PKG_CPE += cpe:2.3:a:videolan:ffnvcodec:11.1.5.2:*:*:*:*:*:*:*
FFNVCODEC_GITURL := https://git.videolan.org/git/ffmpeg/nv-codec-headers.git
ifeq ($(call need_pkg,"ffnvcodec >= 8"),)

View File

@ -1,6 +1,7 @@
{
"name": "fmt",
"version": "10.1.0",
"cpe": "cpe:2.3:a:fmt:fmt:10.1.0:*:*:*:*:*:*:*",
"url": "https://github.com/fmtlib/fmt/archive/__VERSION__.tar.gz",
"deps": [],
"patches": [],

View File

@ -1,5 +1,6 @@
# FMT
FMT_VERSION := 10.1.0
PKG_CPE += cpe:2.3:a:fmt:fmt:$(FMT_VERSION):*:*:*:*:*:*:*
FMT_URL := https://github.com/fmtlib/fmt/archive/$(FMT_VERSION).tar.gz
PKGS += fmt

View File

@ -1,6 +1,7 @@
{
"name": "freetype",
"version": "39ce3ac499d4cd7371031a062f410953c8ecce29",
"cpe": "cpe:2.3:a:freetype:freetype:2.10.1:*:*:*:*:*:*:*",
"url": "https://gitlab.freedesktop.org/freetype/freetype/-/archive/__VERSION__/freetype-__VERSION__.tar.gz",
"use_cmake": true
}

View File

@ -2,6 +2,8 @@
FREETYPE_HASH := 39ce3ac499d4cd7371031a062f410953c8ecce29
FREETYPE_GITURL := https://gitlab.freedesktop.org/freetype/freetype/-/archive/$(FREETYPE_HASH)/freetype-$(FREETYPE_HASH).tar.gz
PKG_CPE += cpe:2.3:a:freetype:freetype:2.10.1:*:*:*:*:*:*:*
ifeq ($(call need_pkg,"freetype2 >= 2.10.1"),)
PKGS_FOUND += freetype
endif

View File

@ -1,6 +1,7 @@
{
"name": "gmp",
"version": "eb35fdadc072ecae2b262fd6e6709c308cadc07a",
"cpe": "cpe:2.3:a:gmplib:gmp:6.3.0:*:*:*:*:*:*:*",
"url": "https://github.com/ShiftMediaProject/gmp/archive/__VERSION__.tar.gz",
"deps": [],
"patches": [],

View File

@ -2,6 +2,7 @@
GMP_VERSION := 6.3.0
PKG_CPE += cpe:2.3:a:gmplib:gmp:$(GMP_VERSION):*:*:*:*:*:*:*
GMP_URL := $(GNU)/gmp/gmp-$(GMP_VERSION).tar.bz2
ifeq ($(call need_pkg,'gmp >= 6.2.0'),)

View File

@ -1,6 +1,7 @@
{
"name": "gnutls",
"version": "3.6.7",
"cpe": "cpe:2.3:a:gnu:gnutls:3.6.7:*:*:*:*:*:*:*",
"url": "https://www.gnupg.org/ftp/gcrypt/gnutls/v3.6/gnutls-__VERSION__.tar.xz",
"deps": [
"iconv",

View File

@ -1,6 +1,7 @@
# GnuTLS
GNUTLS_VERSION := 3.8.3
PKG_CPE += cpe:2.3:a:gnu:gnutls:$(GNUTLS_VERSION):*:*:*:*:*:*:*
GNUTLS_URL := https://www.gnupg.org/ftp/gcrypt/gnutls/v3.8/gnutls-$(GNUTLS_VERSION).tar.xz
PKGS += gnutls

View File

@ -1,6 +1,7 @@
{
"name": "http_parser",
"version": "2.9.4",
"cpe": "cpe:2.3:a:nodejs:http-parser:2.9.4:*:*:*:*:*:*:*",
"url": "https://github.com/nodejs/http-parser/archive/v__VERSION__.tar.gz",
"deps": [],
"patches": [],

View File

@ -1,5 +1,6 @@
# HTTP_PARSER
HTTP_PARSER_VERSION := 2.9.4
PKG_CPE += cpe:2.3:a:nodejs:http-parser:$(HTTP_PARSER_VERSION):*:*:*:*:*:*:*
HTTP_PARSER_URL := https://github.com/nodejs/http-parser/archive/v$(HTTP_PARSER_VERSION).tar.gz
PKGS += http_parser

View File

@ -1,6 +1,7 @@
{
"name": "jsoncpp",
"version": "1.9.3",
"cpe": "cpe:2.3:a:jsoncpp_project:jsoncpp:1.9.3:*:*:*:*:*:*:*",
"url": "https://github.com/open-source-parsers/jsoncpp/archive/__VERSION__.tar.gz",
"deps": [],
"patches": [],

View File

@ -1,5 +1,6 @@
# JSONCPP
JSONCPP_VERSION := 1.9.3
PKG_CPE += cpe:2.3:a:jsoncpp_project:jsoncpp:$(JSONCPP_VERSION):*:*:*:*:*:*:*
JSONCPP_URL := https://github.com/open-source-parsers/jsoncpp/archive/$(JSONCPP_VERSION).tar.gz

View File

@ -1,6 +1,7 @@
{
"name": "libarchive",
"version": "a53d711261f4d5bf2104d9c3616a8602a45ba196",
"cpe": "cpe:2.3:a:libarchive:libarchive:3.6.0:*:*:*:*:*:*:*",
"url": "https://github.com/libarchive/libarchive/archive/__VERSION__.tar.gz",
"deps": ["iconv"],
"patches": [

View File

@ -1,5 +1,6 @@
# LIBARCHIVE
LIBARCHIVE_VERSION := 3.6.0
PKG_CPE += cpe:2.3:a:libarchive:libarchive:$(LIBARCHIVE_VERSION):*:*:*:*:*:*:*
LIBARCHIVE_URL := https://github.com/libarchive/libarchive/releases/download/v$(LIBARCHIVE_VERSION)/libarchive-$(LIBARCHIVE_VERSION).tar.xz
ifndef HAVE_MACOSX

View File

@ -1,6 +1,7 @@
{
"name": "libgit2",
"version": "v1.8.0",
"cpe": "cpe:2.3:a:libgit2:libgit2:1.8.0:*:*:*:*:*:*:*",
"url": "https://github.com/libgit2/libgit2/archive/__VERSION__.tar.gz",
"use_cmake" : true,
"defines": [

View File

@ -1,5 +1,6 @@
# LIBGIT2
LIBGIT2_VERSION := 1.8.0
PKG_CPE += cpe:2.3:a:libgit2:libgit2:${LIBGIT2_VERSION}:*:*:*:*:*:*:*
LIBGIT2_URL := https://github.com/libgit2/libgit2/archive/v${LIBGIT2_VERSION}.tar.gz
PKGS += libgit2

View File

@ -19,6 +19,7 @@
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
#
SSL_VERSION := 3.7.0
PKG_CPE += cpe:2.3:a:openbsd:libressl:$(SSL_VERSION):*:*:*:*:*:*:*
LIBRESSL_VERSION := libressl-$(SSL_VERSION)
LIBRESSL_URL := https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/$(LIBRESSL_VERSION).tar.gz

View File

@ -1,6 +1,7 @@
{
"name": "liburcu",
"version": "0.13.1",
"cpe": "cpe:2.3:a:lttng:urcu:0.13.1:*:*:*:*:*:*:*",
"url": "https://lttng.org/files/urcu/userspace-rcu-__VERSION__.tar.bz2",
"deps": [],
"patches": [],

View File

@ -1,6 +1,7 @@
# liburcu
LIBURCU_VERSION := 0.13.1
PKG_CPE += cpe:2.3:a:lttng:urcu:${LIBURCU_VERSION}:*:*:*:*:*:*:*
LIBURCU_URL := https://lttng.org/files/urcu/userspace-rcu-${LIBURCU_VERSION}.tar.bz2
ifeq ($(call need_pkg "liburcu >= 0.13.1"),)

View File

@ -17,6 +17,7 @@
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
#
LLHTTP_VERSION := 9.2.0
PKG_CPE += cpe:2.3:a:llhttp:llhttp:$(LLHTTP_VERSION):*:*:*:*:*:*:*
LLHTTP_URL := https://github.com/nodejs/llhttp/archive/refs/tags/release/v$(LLHTTP_VERSION).tar.gz
LLHTTP_CMAKECONF := \

View File

@ -1,14 +1,14 @@
{
"name": "lttng-ust",
"version": "2.13.0",
"cpe": "cpe:2.3:a:lttng:ust:2.13.0:*:*:*:*:*:*:*",
"url": "https://lttng.org/files/lttng-ust/lttng-ust-__VERSION__.tar.bz2",
"deps": [
"liburcu",
"liburcu"
],
"patches": [],
"win_patches": [],
"project_paths": [
],
"project_paths": [],
"with_env" : "",
"custom_scripts": {
"pre_build": [],

View File

@ -1,6 +1,7 @@
# lttng-ust
LTTNG_UST_VERSION := 2.13.1
PKG_CPE += cpe:2.3:a:lttng:ust:${LTTNG_UST_VERSION}:*:*:*:*:*:*:*
LTTNG_UST_URL := https://lttng.org/files/lttng-ust/lttng-ust-${LTTNG_UST_VERSION}.tar.bz2
ifeq ($(call need_pkg "liblttng-ust >= 2.13.0"),)

View File

@ -55,6 +55,9 @@ GNU := https://ftpmirror.gnu.org
SF := https://sourceforge.net/projects
CONTRIB_VIDEOLAN ?= https://downloads.videolan.org/pub/contrib
# CPE ID list for generating SBOM
PKG_CPE :=
#
# Machine-dependent variables
#

View File

@ -1,6 +1,7 @@
{
"name": "minizip",
"version": "3.0.0",
"cpe": "cpe:2.3:a:minizip_project:minizip:3.0.0:*:*:*:*:*:*:*",
"url": "https://github.com/zlib-ng/minizip-ng/archive/refs/tags/__VERSION__.tar.gz",
"deps": ["zlib", "iconv"],
"patches": [],

View File

@ -1,5 +1,6 @@
# MINIZIP
LIBMINIZIP_VERSION := 4.0.7
PKG_CPE += cpe:2.3:a:minizip_project:minizip:$(LIBMINIZIP_VERSION):*:*:*:*:*:*:*
LIBMINIZIP_URL := https://github.com/zlib-ng/minizip-ng/archive/$(LIBMINIZIP_VERSION).tar.gz
ifdef HAVE_MACOSX

View File

@ -1,6 +1,7 @@
{
"name": "msgpack-c",
"version": "cpp-6.1.0",
"cpe": "cpe:2.3:a:*:msgpack:6.1.0:*:*:*:*:*:*:*",
"url": "https://github.com/msgpack/msgpack-c/archive/__VERSION__.tar.gz",
"use_cmake" : true,
"defines": [

View File

@ -1,5 +1,6 @@
# MSGPACK
MSGPACK_VERSION := cpp-6.1.0
PKG_CPE += cpe:2.3:a:*:msgpack:6.1.0:*:*:*:*:*:*:*
MSGPACK_URL := https://github.com/msgpack/msgpack-c/archive/$(MSGPACK_VERSION).tar.gz
PKGS += msgpack

View File

@ -1,6 +1,7 @@
{
"name": "nettle",
"version": "c180b4d7afbda4049ad265d1366567f62a7a4a3a",
"cpe": "cpe:2.3:a:nettle_project:nettle:3.9.1:*:*:*:*:*:*:*",
"url": "https://github.com/ShiftMediaProject/nettle/archive/__VERSION__.tar.gz",
"deps": ["gmp"],
"patches": [],

View File

@ -1,6 +1,7 @@
# Nettle
NETTLE_VERSION := nettle_3.9.1_release_20230601
PKG_CPE += cpe:2.3:a:nettle_project:nettle:3.9.1:*:*:*:*:*:*:*
NETTLE_URL := https://git.lysator.liu.se/nettle/nettle/-/archive/$(NETTLE_VERSION)/nettle-$(NETTLE_VERSION).tar.gz
PKGS += nettle

View File

@ -1,6 +1,7 @@
{
"name": "onnx",
"version": "v1.12.0",
"cpe": "cpe:2.3:a:*:onnx:1.12.0:*:*:*:*:*:*:*",
"url": "https://github.com/microsoft/onnxruntime/archive/__VERSION__.tar.gz",
"deps": [],
"patches": [],

View File

@ -1,5 +1,6 @@
# ONNX
ONNX_VERSION := v1.16.3
PKG_CPE += cpe:2.3:a:*:onnx:1.16.3:*:*:*:*:*:*:*
ONNX_URL := https://github.com/microsoft/onnxruntime.git
$(TARBALLS)/onnxruntime-$(ONNX_VERSION).tar.xz:

View File

@ -1,6 +1,7 @@
{
"name": "opencv",
"version": "4.6.0",
"cpe": "cpe:2.3:a:opencv:opencv:4.6.0:*:*:*:*:*:*:*",
"url": "https://github.com/opencv/opencv/archive/__VERSION__.tar.gz",
"deps": ["opencv_contrib"],
"patches": [],

View File

@ -1,5 +1,6 @@
# OPENCV
OPENCV_VERSION := 4.6.0
PKG_CPE += cpe:2.3:a:opencv:opencv:$(OPENCV_VERSION):*:*:*:*:*:*:*
OPENCV_CONTRIB_VERSION := 4.6.0
OPENCV_URL := https://github.com/opencv/opencv/archive/$(OPENCV_VERSION).tar.gz

View File

@ -1,6 +1,7 @@
{
"name": "openssl",
"version": "OpenSSL_1_1_1-stable",
"cpe": "cpe:2.3:a:openssl:openssl:1.1.1:*:*:*:*:*:*:*",
"url": "https://github.com/openssl/openssl/archive/__VERSION__.tar.gz",
"custom_scripts": {
"build": [

View File

@ -1,6 +1,7 @@
{
"name": "opus",
"version": "76d2d6dca0a224f3ffb34b7429d7547bdbb1bad7",
"cpe": "cpe:2.3:a:*:opus:1.4:*:*:*:*:*:*:*",
"url": "https://github.com/ShiftMediaProject/opus/archive/__VERSION__.tar.gz",
"deps": [],
"patches": [],

View File

@ -1,6 +1,7 @@
# opus
OPUS_VERSION := 1.4
PKG_CPE += cpe:2.3:a:*:opus:$(OPUS_VERSION):*:*:*:*:*:*:*
OPUS_URL := https://github.com/xiph/opus/archive/v$(OPUS_VERSION).tar.gz
PKGS += opus

View File

@ -1,6 +1,7 @@
{
"name": "portaudio",
"version": "v190600_20161030",
"cpe": "cpe:2.3:a:*:portaudio:19.6.0:*:*:*:*:*:*:*",
"url": "https://github.com/PortAudio/portaudio/archive/refs/tags/pa_stable___VERSION__.tar.gz",
"use_cmake" : true,
"defines": [

View File

@ -1,6 +1,7 @@
# PortAudio
PORTAUDIO_VERSION := v19_20140130
PKG_CPE += cpe:2.3:a:*:portaudio:19.5.0:*:*:*:*:*:*:*
PORTAUDIO_URL := http://www.portaudio.com/archives/pa_stable_$(PORTAUDIO_VERSION).tgz
ifdef HAVE_WIN32

View File

@ -1,6 +1,7 @@
{
"name": "pthreads",
"version": "v-2-10-0-rc",
"cpe": "cpe:2.3:a:pthread-win32_project:pthreads-win32:2.10.0:rc:*:*:*:*:*:*",
"url": " https://github.com/jwinarske/pthreads4w/archive/refs/tags/__VERSION__.tar.gz",
"win_patches": [
"pthreads-windows.patch",

View File

@ -1,6 +1,7 @@
{
"name": "restinio",
"version": "bbaa034dbcc7555ce67df0f8a1475591a7441733",
"cpe": "cpe:2.3:a:*:restinio:0.7.2:*:*:*:*:*:*:*",
"url": "https://github.com/aberaud/restinio/archive/__VERSION__.tar.gz",
"deps": [
"fmt",

View File

@ -1,5 +1,6 @@
# RESTINIO
RESTINIO_VERSION := 0.7.2
PKG_CPE += cpe:2.3:a:*:restinio:$(RESTINIO_VERSION):*:*:*:*:*:*:*
RESTINIO_URL := https://github.com/Stiffstream/restinio/releases/download/v.$(RESTINIO_VERSION)/restinio-$(RESTINIO_VERSION).tar.bz2
EXPECTED_LITE_URL := https://raw.githubusercontent.com/martinmoene/expected-lite/master/include/nonstd/expected.hpp

View File

@ -1,6 +1,7 @@
# speex
SPEEX_HASH := Speex-1.2.1
SPEEX_VERSION := 1.2.1
SPEEX_HASH := Speex-$(SPEEX_VERSION)
PKG_CPE += cpe:2.3:a:xiph:speex:$(SPEEX_VERSION):*:*:*:*:*:*:*
SPEEX_GITURL := https://gitlab.xiph.org/xiph/speex/-/archive/$(SPEEX_HASH)/speex-$(SPEEX_HASH).tar.gz
PKGS += speex

View File

@ -1,6 +1,7 @@
{
"name": "speexdsp",
"version": "SpeexDSP-1.2.0",
"cpe": "cpe:2.3:a:xiph:speex:1.2.0:*:*:*:*:*:*:*",
"url": "https://github.com/xiph/speexdsp/archive/__VERSION__.tar.gz",
"deps": [],
"patches": ["speexdsp_vs_proj.patch"],

View File

@ -1,6 +1,8 @@
# speexdsp
SPEEXDSP_HASH := SpeexDSP-1.2.0
SPEEXDSP_VERSION := 1.2.0
SPEEXDSP_HASH := SpeexDSP-$(SPEEXDSP_VERSION)
PKG_CPE += cpe:2.3:a:xiph:speex:$(SPEEXDSP_VERSION):*:*:*:*:*:*:*
SPEEXDSP_GITURL := https://gitlab.xiph.org/xiph/speexdsp/-/archive/$(SPEEXDSP_HASH)/speexdsp-$(SPEEXDSP_HASH).tar.gz
PKGS += speexdsp

View File

@ -1,6 +1,7 @@
{
"name": "upnp",
"version": "1.8.4",
"cpe": "cpe:2.3:a:pupnp_project:pupnp:1.8.4:*:*:*:*:*:*:*",
"url": "https://github.com/mrjimenez/pupnp/archive/release-__VERSION__.tar.gz",
"deps": ["pthreads"],
"patches": [],

View File

@ -1,5 +1,6 @@
# UPNP
UPNP_VERSION := 1.14.18
PKG_CPE += cpe:2.3:a:pupnp_project:pupnp:$(UPNP_VERSION):*:*:*:*:*:*:*
UPNP_URL := https://github.com/pupnp/pupnp/archive/release-$(UPNP_VERSION).tar.gz
PKGS += upnp

View File

@ -1,6 +1,7 @@
{
"name": "vpx",
"version": "f4d13145a2c3aea6fbf211dc493ea4e97be6a092",
"cpe": "cpe:2.3:a:webmproject:libvpx:1.14.1:*:*:*:*:*:*:*",
"url": "https://github.com/ShiftMediaProject/libvpx/archive/__VERSION__.tar.gz",
"deps": [],
"patches": [],

View File

@ -1,6 +1,7 @@
# libvpx
VPX_HASH := v1.14.1
VPX_VERSION := 1.14.1
VPX_HASH := v$(VPX_VERSION)
PKG_CPE += cpe:2.3:a:webmproject:libvpx:$(VPX_VERSION):*:*:*:*:*:*:*
VPX_URL := https://github.com/webmproject/libvpx/archive/$(VPX_HASH).tar.gz
$(TARBALLS)/libvpx-$(VPX_HASH).tar.gz:

View File

@ -1,6 +1,7 @@
{
"name": "yaml-cpp",
"version": "24fa1b33805c9a91df0f32c46c28e314dd7ad96f",
"cpe": "cpe:2.3:a:*:yaml-cpp:0.8.0:*:*:*:*:*:*:*",
"url": "https://github.com/jbeder/yaml-cpp/archive/__VERSION__.tar.gz",
"use_cmake": true,
"defines": [

View File

@ -1,5 +1,6 @@
# YAML
YAML_CPP_VERSION := 0.8.0
PKG_CPE += cpe:2.3:a:*:yaml-cpp:$(YAML_CPP_VERSION):*:*:*:*:*:*:*
YAML_CPP_URL := https://github.com/jbeder/yaml-cpp/archive/$(YAML_CPP_VERSION).tar.gz
PKGS += yaml-cpp

View File

@ -1,6 +1,7 @@
{
"name": "zlib",
"version": "8e4e3ead55cdd296130242d86b44b92fde3ea4d4",
"cpe": "cpe:2.3:a:zlib:zlib:1.2.8:*:*:*:*:*:*:*",
"url": "https://github.com/ShiftMediaProject/zlib/archive/__VERSION__.tar.gz",
"deps": [],
"patches": [],

View File

@ -1,5 +1,6 @@
# ZLIB
ZLIB_VERSION := 1.2.8
PKG_CPE += cpe:2.3:a:zlib:zlib:$(ZLIB_VERSION):*:*:*:*:*:*:*
ZLIB_URL := https://github.com/madler/zlib/archive/v$(ZLIB_VERSION).tar.gz
PKGS += zlib