package/taglib: add TAGLIB_CPE_ID_VENDOR
authorFabrice Fontaine <fontaine.fabrice@gmail.com>
Sat, 15 May 2021 22:05:10 +0000 (00:05 +0200)
committerYann E. MORIN <yann.morin.1998@free.fr>
Sun, 16 May 2021 16:30:44 +0000 (18:30 +0200)
cpe:2.3:a:taglib:taglib is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Ataglib%3Ataglib

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
package/taglib/taglib.mk

index 738be357563d538fff62800ff0709263497e7e0f..f31f1046a580ad57e47443b7f37a1fde97ab1c6d 100644 (file)
@@ -9,6 +9,7 @@ TAGLIB_SITE = http://taglib.github.io/releases
 TAGLIB_INSTALL_STAGING = YES
 TAGLIB_LICENSE = LGPL-2.1 or MPL-1.1
 TAGLIB_LICENSE_FILES = COPYING.LGPL COPYING.MPL
+TAGLIB_CPE_ID_VENDOR = taglib
 
 # 0002-Don-t-assume-TDRC-is-an-instance-of-TextIdentificationFrame.patch
 TAGLIB_IGNORE_CVES += CVE-2017-12678