metadata.xml: popuplate CPE entries for better CVE tracking

Signed-off-by: Allen Webb <[email protected]>
Signed-off-by: Mike Frysinger <[email protected]>

app-accessibility/brltty/metadata.xml

@@ -15,6 +15,9 @@
   <flag name="pcm">support for sound card digital audio</flag>
   <flag name="speech">speech support</flag>
 </use>
+<upstream>
+  <remote-id type="cpe">cpe:/a:mielke:brltty</remote-id>
+</upstream>
 <longdescription lang="en">
 BRLTTY is a background process (daemon) which provides access to the Linux/Unix
 console (when in text mode) for a blind person using a refreshable braille

app-arch/cpio/metadata.xml

@@ -5,4 +5,7 @@
 	<email>[email protected]</email>
 	<name>Gentoo Base System</name>
 </maintainer>
+<upstream>
+	<remote-id type="cpe">cpe:/a:gnu:cpio</remote-id>
+</upstream>
 </pkgmetadata>

app-arch/libarchive/metadata.xml

@@ -33,6 +33,7 @@
 		</flag>
 	</use>
 	<upstream>
+		<remote-id type="cpe">cpe:/a:libarchive:libarchive</remote-id>
 		<remote-id type="github">libarchive/libarchive</remote-id>
 		<bugs-to>https://github.com/libarchive/libarchive/issues</bugs-to>
 	</upstream>

app-arch/pigz/metadata.xml

@@ -12,4 +12,7 @@
 	<use>
 		<flag name="symlink">Install symlinks which override <pkg>app-arch/gzip</pkg> implementation</flag>
 	</use>
+	<upstream>
+		<remote-id type="cpe">cpe:/a:zlib:pigz</remote-id>
+	</upstream>
 </pkgmetadata>

app-arch/unzip/metadata.xml

@@ -9,6 +9,7 @@
 		<flag name="natspec">Use <pkg>dev-libs/libnatspec</pkg> to correctly decode non-ascii file names archived in Windows.</flag>
 	</use>
 	<upstream>
+		<remote-id type="cpe">cpe:/a:info-zip:unzip</remote-id>
 		<remote-id type="sourceforge">infozip</remote-id>
 	</upstream>
 </pkgmetadata>

app-arch/xz-utils/metadata.xml

@@ -10,4 +10,7 @@
 		used in any of the default xz presets. This includes delta
 		and BCJ coders, additional match finders and SHA256 checks.</flag>
 </use>
+<upstream>
+	<remote-id type="cpe">cpe:/a:tukaani:xz</remote-id>
+</upstream>
 </pkgmetadata>

app-crypt/gnupg/metadata.xml

@@ -35,4 +35,7 @@
 		Install the wks-server
 		</flag>
 	</use>
+	<upstream>
+		<remote-id type="cpe">cpe:/a:gnupg:gnupg</remote-id>
+	</upstream>
 </pkgmetadata>

app-misc/jq/metadata.xml

@@ -9,6 +9,7 @@
 		<flag name="oniguruma">Use dev-libs/oniguruma for regular expression support</flag>
 	</use>
 	<upstream>
+		<remote-id type="cpe">cpe:/a:jq_project:jq</remote-id>
 		<remote-id type="github">stedolan/jq</remote-id>
 	</upstream>
 </pkgmetadata>

app-text/ghostscript-gpl/metadata.xml

@@ -6,6 +6,7 @@
 		<name>Gentoo Printing Project</name>
 	</maintainer>
 	<upstream>
+		<remote-id type="cpe">cpe:/a:artifex:gpl_ghostscript</remote-id>
 		<remote-id type="sourceforge">djvu</remote-id>
 		<remote-id type="github">ArtifexSoftware/ghostpdl-downloads</remote-id>
 	</upstream>

app-text/htmltidy/metadata.xml

@@ -3,6 +3,7 @@
 <pkgmetadata>
 	<!-- maintainer-needed -->
 	<upstream>
+		<remote-id type="cpe">cpe:/a:html-tidy:tidy</remote-id>
 		<remote-id type="sourceforge">tidy</remote-id>
 	</upstream>
 </pkgmetadata>

app-text/poppler/metadata.xml

@@ -17,6 +17,9 @@
 	<email>[email protected]</email>
 	<description>Please CC on stabilisation bugs</description>
 </maintainer>
+<upstream>
+	<remote-id type="cpe">cpe:/a:freedesktop:poppler</remote-id>
+</upstream>
 <use>
 	<flag name="nss">Enable signatures handling with <pkg>dev-libs/nss</pkg></flag>
 	<flag name="utils">Install command-line PDF converters and various utilities.</flag>

app-text/qpdf/metadata.xml

@@ -9,6 +9,7 @@
 		<flag name="perl">Install fix-qdf tool (for reverting PDF edits) written in perl</flag>
 	</use>
 	<upstream>
+		<remote-id type="cpe">cpe:/a:qpdf_project:qpdf</remote-id>
 		<remote-id type="sourceforge">qpdf</remote-id>
 	</upstream>
 </pkgmetadata>

dev-libs/boost/metadata.xml

@@ -19,6 +19,7 @@
 		<flag name="tools">Build and install the boost tools (bcp, quickbook, inspect, wave)</flag>
 	</use>
 	<upstream>
+		<remote-id type="cpe">cpe:/a:boost:boost</remote-id>
 		<remote-id type="sourceforge">boost</remote-id>
 	</upstream>
 </pkgmetadata>

dev-libs/confuse/metadata.xml

@@ -6,6 +6,7 @@
 		<name>Sergey Popov</name>
 	</maintainer>
 	<upstream>
+		<remote-id type="cpe">cpe:/a:libconfuse_project:libconfuse</remote-id>
 		<remote-id type="github">martinh/libconfuse</remote-id>
 	</upstream>
 </pkgmetadata>

dev-libs/elfutils/metadata.xml

@@ -10,4 +10,7 @@
 		<flag name="threads">Build the libraries with thread safe support</flag>
 		<flag name="utils">Install command-line utilities (all the eu-* programs)</flag>
 	</use>
+	<upstream>
+		<remote-id type="cpe">cpe:/a:elfutils_project:elfutils</remote-id>
+	</upstream>
 </pkgmetadata>

dev-libs/fribidi/metadata.xml

@@ -5,4 +5,7 @@
 		<email>[email protected]</email>
 		<name>Gentoo GNOME Desktop</name>
 	</maintainer>
+	<upstream>
+		<remote-id type="cpe">cpe:/a:fribidi:gnu_fribidi</remote-id>
+	</upstream>
 </pkgmetadata>

dev-libs/gmp/metadata.xml

@@ -8,4 +8,7 @@
 <use>
 	<flag name="asm">Enable use of hand optimized assembly routines (faster execution)</flag>
 </use>
+<upstream>
+	<remote-id type="cpe">cpe:/a:gmplib:gmp</remote-id>
+</upstream>
 </pkgmetadata>

dev-libs/libbsd/metadata.xml

@@ -5,4 +5,7 @@
     <email>[email protected]</email>
     <name>Gentoo Freedesktop Project</name>
   </maintainer>
+  <upstream>
+    <remote-id type="cpe">cpe:/a:libbsd:libbsd</remote-id>
+  </upstream>
 </pkgmetadata>

dev-libs/libcroco/metadata.xml

@@ -13,4 +13,7 @@ A parser module with : A SAC like api and A CSSOM like api.
 A CSS2 selection engine
 An XML/CSS layout/rendering engine
 </longdescription>
+<upstream>
+	<remote-id type="cpe">cpe:/a:gnome:libcroco</remote-id>
+</upstream>
 </pkgmetadata>

dev-libs/libdaemon/metadata.xml

@@ -4,4 +4,7 @@
 	<maintainer type="person">
 		<email>[email protected]</email>
 	</maintainer>
+	<upstream>
+		<remote-id type="cpe">cpe:/a:libdaemon_project:libdaemon</remote-id>
+	</upstream>
 </pkgmetadata>

dev-libs/libestr/metadata.xml

@@ -12,5 +12,6 @@
 	<upstream>
 		<bugs-to>https://github.com/rsyslog/libestr/issues</bugs-to>
 		<remote-id type="github">rsyslog/libestr</remote-id>
+		<remote-id type="cpe">cpe:/a:adiscon:libestr</remote-id>
 	</upstream>
 </pkgmetadata>

dev-libs/libfastjson/metadata.xml

@@ -11,5 +11,6 @@
 	<upstream>
 		<bugs-to>https://github.com/rsyslog/libfastjson/issues</bugs-to>
 		<remote-id type="github">rsyslog/libfastjson</remote-id>
+		<remote-id type="cpe">cpe:/a:rsyslog:libfastjson</remote-id>
 	</upstream>
 </pkgmetadata>

dev-libs/libffi/metadata.xml

@@ -36,4 +36,7 @@
 	<use>
 		<flag name="pax_kernel">Use PaX emulated trampolines, for we can't use PROT_EXEC</flag>
 	</use>
+	<upstream>
+		<remote-id type="cpe">cpe:/a:libffi_project:libffi</remote-id>
+	</upstream>
 </pkgmetadata>

dev-libs/libgcrypt/metadata.xml

@@ -9,6 +9,9 @@
 		<email>[email protected]</email>
 		<name>Crypto</name>
 	</maintainer>
+	<upstream>
+		<remote-id type="cpe">cpe:/a:gnupg:libgcrypt</remote-id>
+	</upstream>
 <use>
 <flag name="o-flag-munging">Enable O-flag mangling during build</flag>
 </use>

dev-libs/liblogging/metadata.xml

@@ -19,6 +19,7 @@
 		</flag>
 	</use>
 	<upstream>
+		<remote-id type="cpe">cpe:/a:adiscon:liblogging</remote-id>
 		<remote-id type="github">rsyslog/liblogging</remote-id>
 	</upstream>
 </pkgmetadata>

dev-libs/libltdl/metadata.xml

@@ -5,4 +5,7 @@
 	<email>[email protected]</email>
 	<name>Gentoo Base System</name>
 </maintainer>
+<upstream>
+	<remote-id type="cpe">cpe:/a:gnu:libtool</remote-id>
+</upstream>
 </pkgmetadata>

dev-libs/libp11/metadata.xml

@@ -13,6 +13,7 @@
 		<flag name="doc">Generate and install API documentation for the package.</flag>
 	</use>
 	<upstream>
+		<remote-id type="cpe">cpe:/a:opensc-project:opensc</remote-id>
 		<remote-id type="github">opensc/libp11</remote-id>
 		<remote-id type="sourceforge">opensc</remote-id>
 	</upstream>

dev-libs/libtasn1/metadata.xml

@@ -10,4 +10,7 @@
 			Enable usage of <pkg>dev-util/valgrind</pkg> in debug
 		</flag>
 	</use>
+	<upstream>
+		<remote-id type="cpe">cpe:/a:gnu:libtasn1</remote-id>
+	</upstream>
 </pkgmetadata>

dev-libs/libxslt/metadata.xml

@@ -5,4 +5,7 @@
     <email>[email protected]</email>
     <name>Gentoo GNOME Desktop</name>
   </maintainer>
+  <upstream>
+    <remote-id type="cpe">cpe:/a:xmlsoft:libxslt</remote-id>
+  </upstream>
 </pkgmetadata>

dev-libs/libzip/metadata.xml

@@ -9,6 +9,9 @@
 	<email>[email protected]</email>
 	<name>Gentoo KDE Project</name>
 </maintainer>
+<upstream>
+	<remote-id type="cpe">cpe:/a:nih:libzip</remote-id>
+</upstream>
 <use>
 	<flag name="mbedtls">Use <pkg>net-libs/mbedtls</pkg> as TLS provider</flag>
 </use>

dev-libs/lzo/metadata.xml

@@ -5,4 +5,7 @@
 		<email>[email protected]</email>
 		<name>Michał Górny</name>
 	</maintainer>
+	<upstream>
+		<remote-id type="cpe">cpe:/a:lzo_project:lzo</remote-id>
+	</upstream>
 </pkgmetadata>

dev-libs/nettle/metadata.xml

@@ -5,4 +5,7 @@
 		<email>[email protected]</email>
 		<name>Crypto</name>
 	</maintainer>
+	<upstream>
+		<remote-id type="cpe">cpe:/a:nettle_project:nettle</remote-id>
+	</upstream>
 </pkgmetadata>

dev-libs/nspr/metadata.xml

@@ -5,4 +5,7 @@
 	<email>[email protected]</email>
 	<name>Gentoo Mozilla Team</name>
 </maintainer>
+<upstream>
+	<remote-id type="cpe">cpe:/a:mozilla:netscape_portable_runtime</remote-id>
+</upstream>
 </pkgmetadata>

dev-libs/pkcs11-helper/metadata.xml

@@ -9,6 +9,7 @@
 		<flag name="nss">Enable NSS crypto engine</flag>
 	</use>
 	<upstream>
+		<remote-id type="cpe">cpe:/a:opensc-project:opensc</remote-id>
 		<remote-id type="sourceforge">opensc</remote-id>
 		<remote-id type="github">OpenSC/pkcs11-helper</remote-id>
 	</upstream>

dev-libs/protobuf/metadata.xml

@@ -14,6 +14,7 @@
 		<subslots>Soname version number</subslots>
 	</slots>
 	<upstream>
+		<remote-id type="cpe">cpe:/a:google:protobuf</remote-id>
 		<remote-id type="github">protocolbuffers/protobuf</remote-id>
 	</upstream>
 </pkgmetadata>

dev-libs/vala-common/metadata.xml

@@ -5,4 +5,7 @@
 	<email>[email protected]</email>
 	<name>Gentoo GNOME Desktop</name>
 </maintainer>
+<upstream>
+	<remote-id type="cpe">cpe:/a:gnome:vala</remote-id>
+</upstream>
 </pkgmetadata>

dev-util/android-tools/metadata.xml

@@ -5,6 +5,7 @@
 		<bugs-to>https://code.google.com/p/android/issues/list</bugs-to>
 		<changelog>https://android.googlesource.com/platform/system/core.git/+log/HEAD</changelog>
 		<doc>https://android.googlesource.com/platform/system/core.git/+/master/adb/OVERVIEW.TXT</doc>
+		<remote-id type="cpe">cpe:/a:google:android_debug_bridge</remote-id>
 		<remote-id type="github">android/platform_system_core</remote-id>
 		<remote-id type="launchpad">ubuntu</remote-id>
 	</upstream>

media-gfx/imagemagick/metadata.xml

@@ -16,4 +16,7 @@
     <flag name="q32">Set quantum depth value to 32</flag>
     <flag name="q8">Set quantum depth value to 8</flag>
   </use>
+  <upstream>
+    <remote-id type="cpe">cpe:/a:imagemagick:imagemagick</remote-id>
+  </upstream>
 </pkgmetadata>

media-gfx/sane-backends/metadata.xml

@@ -2,4 +2,7 @@
 <!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
 <pkgmetadata>
 <!-- maintainer-needed -->
+<upstream>
+<remote-id type="cpe">cpe:/a:sane-backends_project:sane-backends</remote-id>
+</upstream>
 </pkgmetadata>

media-libs/fontconfig/metadata.xml

@@ -6,4 +6,7 @@
 		<name>Fonts</name>
 	</maintainer>
 	<longdescription>Fontconfig is a font configuration and customization library, which does not depend on the X Window System. It is designed to locate fonts within the system and select them according to requirements specified by applications.</longdescription>
+	<upstream>
+		<remote-id type="cpe">cpe:/a:fontconfig_project:fontconfig</remote-id>
+	</upstream>
 </pkgmetadata>

media-libs/freeimage/metadata.xml

@@ -6,6 +6,7 @@
 		<name>Gentoo Games Project</name>
 	</maintainer>
 	<upstream>
+		<remote-id type="cpe">cpe:/a:freeimage_project:freeimage</remote-id>
 		<remote-id type="sourceforge">freeimage</remote-id>
 	</upstream>
 </pkgmetadata>

media-libs/harfbuzz/metadata.xml

@@ -13,6 +13,9 @@
 		<email>[email protected]</email>
 		<name>Gentoo GNOME Desktop</name>
 	</maintainer>
+	<upstream>
+		<remote-id type="cpe">cpe:/a:harfbuzz_project:harfbuzz</remote-id>
+	</upstream>
 	<use>
 		<flag name="glib">Compile with GLib Unicode support</flag>
 		<flag name="graphite">Use graphite to render complex non-Roman writing systems</flag>

media-libs/lcms/metadata.xml

@@ -6,6 +6,7 @@
 		<name>Gentoo Printing Project</name>
 	</maintainer>
 	<upstream>
+		<remote-id type="cpe">cpe:/a:littlecms:little_cms_color_engine</remote-id>
 		<remote-id type="sourceforge">lcms</remote-id>
 	</upstream>
 </pkgmetadata>

media-libs/libexif/metadata.xml

@@ -6,6 +6,7 @@
 		<name>Gentoo Graphics Project</name>
 	</maintainer>
 	<upstream>
+		<remote-id type="cpe">cpe:/a:curtis_galloway:libexif</remote-id>
 		<remote-id type="sourceforge">libexif</remote-id>
 	</upstream>
 </pkgmetadata>

media-libs/libmtp/metadata.xml

@@ -6,6 +6,7 @@
 		<name>Gentoo Sound project</name>
 	</maintainer>
 	<upstream>
+		<remote-id type="cpe">cpe:/a:libmtp_project:libmtp</remote-id>
 		<remote-id type="sourceforge">libmtp</remote-id>
 	</upstream>
 </pkgmetadata>

media-libs/libvorbis/metadata.xml

@@ -5,4 +5,7 @@
 	<email>[email protected]</email>
 	<name>Gentoo Sound project</name>
 </maintainer>
+<upstream>
+	<remote-id type="cpe">cpe:/a:xiph:libvorbis</remote-id>
+</upstream>
 </pkgmetadata>

media-libs/libvpx/metadata.xml

@@ -13,4 +13,7 @@
 		<flag name="postproc">Enable additional post processing filters</flag>
 		<flag name="svc">Enable spatial-svc support (experimental)</flag>
 	</use>
+	<upstream>
+		<remote-id type="cpe">cpe:/a:john_koleszar:libvpx</remote-id>
+	</upstream>
 </pkgmetadata>

media-libs/mesa/metadata.xml

@@ -29,6 +29,7 @@
 		<flag name="xvmc">Enable the XvMC acceleration interface for the Gallium3D Video Layer.</flag>
 	</use>
 	<upstream>
+		<remote-id type="cpe">cpe:/a:mesa3d:mesa</remote-id>
 		<remote-id type="sourceforge">mesa3d</remote-id>
 	</upstream>
 </pkgmetadata>

media-libs/opencv/metadata.xml

@@ -29,6 +29,7 @@ Face Recognition; Gesture Recognition; Motion Tracking, Ego Motion, Motion Under
 		<flag name="vtk">Build new 3D visualization module viz based on sci-libs/vtk</flag>
 	</use>
 	<upstream>
+		<remote-id type="cpe">cpe:/a:opencv:opencv</remote-id>
 		<remote-id type="sourceforge">opencvlibrary</remote-id>
 		<remote-id type="github">Itseez/opencv_contrib</remote-id>
 	</upstream>