tree 4c4e2ce613f6ebd60737bc417a5cb69f10288c6f
parent a93f962783ed4fb0ed3f220f391042679eb17742
author Lei Zhang <thestig@chromium.org> 1598578040 +0000
committer Chromium commit bot <commit-bot@chromium.org> 1598578040 +0000

Add CPEs for libpng and freetype.

CPEs are the way that MITRE tracks different projects and versions, and
that's the input required by Vomit, Google's automated vulnerability
notification system. At present Vomit is unable to identify the versions
for these components and is therefore reporting the wrong CVEs in crbugs.

Adding these CPEPrefix lines will enable Vomit to notify for any
vulnerabilities affecting these versions.

This is copied from https://crrev.com/746237 and other related CLs.

Change-Id: I0f04446763510ca4cc85746adb410ae9f3f4e135
Reviewed-on: https://pdfium-review.googlesource.com/c/pdfium/+/73191
Reviewed-by: Tom Sepez <tsepez@chromium.org>
Commit-Queue: Lei Zhang <thestig@chromium.org>