contrib: add CPE information on packages

Added "cpe" field in package.json and PKG_CVE for make rules.
GitLab: #1021

Change-Id: I375fe3c224b0578ed702877d236fbc8ed0a5d8d5

contrib/src/argon2/package.json

 {
     "name": "argon2",
     "version": "670229c849b9fe882583688b74eb7dfdc846f9f6",
+    "cpe": "cpe:2.3:a:argon2_project:argon2:-:*:*:*:*:*:*:*",
     "url": "https://github.com/P-H-C/phc-winner-argon2/archive/__VERSION__.tar.gz",
     "deps": [],
     "patches": [],

contrib/src/argon2/rules.mak

 # ARGON2
 ARGON2_VERSION := 16d3df698db2486dde480b09a732bf9bf48599f9
+PKG_CPE += cpe:2.3:a:argon2_project:argon2:-:*:*:*:*:*:*:*
 ARGON2_URL := https://github.com/P-H-C/phc-winner-argon2/archive/$(ARGON2_VERSION).tar.gz
 
 ifeq ($(call need_pkg,'libargon2 > 20161029'),)

contrib/src/asio/package.json

 {
     "name": "asio",
     "version": "asio-1-28-1",
+    "cpe": "cpe:2.3:a:*:asio:1.28.1:*:*:*:*:*:*:*",
     "url": "https://github.com/chriskohlhoff/asio/archive/__VERSION__.tar.gz",
     "deps": ["openssl"],
     "patches": [],

contrib/src/asio/rules.mak

@@ -19,6 +19,7 @@
 #
 
 ASIO_VERSION := asio-1-28-1
+PKG_CPE += cpe:2.3:a:*:asio:1.28.1:*:*:*:*:*:*:*
 ASIO_URL := https://github.com/chriskohlhoff/asio/archive/$(ASIO_VERSION).tar.gz
 
 # Pure dependency of restinio: do not add to PKGS.

contrib/src/ffmpeg/package.json

 {
     "name": "ffmpeg",
     "version": "6.0.1",
+    "cpe": "cpe:2.3:a:ffmpeg:ffmpeg:6.0.1:*:*:*:*:*:*:*",
     "url": "https://ffmpeg.org/releases/ffmpeg-__VERSION__.tar.xz",
     "deps": [
         "vpx",

contrib/src/ffmpeg/rules.mak

 FFMPEG_HASH := 6.0.1
+PKG_CPE += cpe:2.3:a:ffmpeg:ffmpeg:6.0.1:*:*:*:*:*:*:*
 FFMPEG_URL := https://ffmpeg.org/releases/ffmpeg-$(FFMPEG_HASH).tar.xz
 
 PKGS+=ffmpeg

contrib/src/ffnvcodec/package.json

 {
     "name": "ffnvcodec",
     "version": "n11.1.5.2",
+    "cpe": "cpe:2.3:a:videolan:ffnvcodec:11.1.5.2:*:*:*:*:*:*:*",
     "url": "https://github.com/FFmpeg/nv-codec-headers/archive/__VERSION__.tar.gz",
     "deps": [],
     "patches": [],

contrib/src/ffnvcodec/rules.mak

 # ffnvcodec
 FFNVCODEC_VERSION := n11.1.5.2
+PKG_CPE += cpe:2.3:a:videolan:ffnvcodec:11.1.5.2:*:*:*:*:*:*:*
 FFNVCODEC_GITURL := https://git.videolan.org/git/ffmpeg/nv-codec-headers.git
 
 ifeq ($(call need_pkg,"ffnvcodec >= 8"),)

contrib/src/fmt/package.json

 {
     "name": "fmt",
     "version": "10.1.0",
+    "cpe": "cpe:2.3:a:fmt:fmt:10.1.0:*:*:*:*:*:*:*",
     "url": "https://github.com/fmtlib/fmt/archive/__VERSION__.tar.gz",
     "deps": [],
     "patches": [],

contrib/src/fmt/rules.mak

 # FMT
 FMT_VERSION := 10.1.0
+PKG_CPE += cpe:2.3:a:fmt:fmt:$(FMT_VERSION):*:*:*:*:*:*:*
 FMT_URL := https://github.com/fmtlib/fmt/archive/$(FMT_VERSION).tar.gz
 
 PKGS += fmt

contrib/src/freetype/package.json

 {
     "name": "freetype",
     "version": "39ce3ac499d4cd7371031a062f410953c8ecce29",
+    "cpe": "cpe:2.3:a:freetype:freetype:2.10.1:*:*:*:*:*:*:*",
     "url": "https://gitlab.freedesktop.org/freetype/freetype/-/archive/__VERSION__/freetype-__VERSION__.tar.gz",
     "use_cmake": true
 }

contrib/src/freetype/rules.mak

@@ -2,6 +2,8 @@
 FREETYPE_HASH := 39ce3ac499d4cd7371031a062f410953c8ecce29
 FREETYPE_GITURL := https://gitlab.freedesktop.org/freetype/freetype/-/archive/$(FREETYPE_HASH)/freetype-$(FREETYPE_HASH).tar.gz
 
+PKG_CPE += cpe:2.3:a:freetype:freetype:2.10.1:*:*:*:*:*:*:*
+
 ifeq ($(call need_pkg,"freetype2 >= 2.10.1"),)
 PKGS_FOUND += freetype
 endif

contrib/src/gmp/package.json

 {
     "name": "gmp",
     "version": "eb35fdadc072ecae2b262fd6e6709c308cadc07a",
+    "cpe": "cpe:2.3:a:gmplib:gmp:6.3.0:*:*:*:*:*:*:*",
     "url": "https://github.com/ShiftMediaProject/gmp/archive/__VERSION__.tar.gz",
     "deps": [],
     "patches": [],

contrib/src/gmp/rules.mak

@@ -2,6 +2,7 @@
 
 
 GMP_VERSION := 6.3.0
+PKG_CPE += cpe:2.3:a:gmplib:gmp:$(GMP_VERSION):*:*:*:*:*:*:*
 GMP_URL := $(GNU)/gmp/gmp-$(GMP_VERSION).tar.bz2
 
 ifeq ($(call need_pkg,'gmp >= 6.2.0'),)

contrib/src/gnutls/package.json

 {
     "name": "gnutls",
     "version": "3.6.7",
+    "cpe": "cpe:2.3:a:gnu:gnutls:3.6.7:*:*:*:*:*:*:*",
     "url": "https://www.gnupg.org/ftp/gcrypt/gnutls/v3.6/gnutls-__VERSION__.tar.xz",
     "deps": [
         "iconv",

contrib/src/gnutls/rules.mak

 # GnuTLS
 
 GNUTLS_VERSION := 3.8.3
+PKG_CPE += cpe:2.3:a:gnu:gnutls:$(GNUTLS_VERSION):*:*:*:*:*:*:*
 GNUTLS_URL := https://www.gnupg.org/ftp/gcrypt/gnutls/v3.8/gnutls-$(GNUTLS_VERSION).tar.xz
 
 PKGS += gnutls

contrib/src/http_parser/package.json

 {
     "name": "http_parser",
     "version": "2.9.4",
+    "cpe": "cpe:2.3:a:nodejs:http-parser:2.9.4:*:*:*:*:*:*:*",
     "url": "https://github.com/nodejs/http-parser/archive/v__VERSION__.tar.gz",
     "deps": [],
     "patches": [],

contrib/src/http_parser/rules.mak

 # HTTP_PARSER
 HTTP_PARSER_VERSION := 2.9.4
+PKG_CPE += cpe:2.3:a:nodejs:http-parser:$(HTTP_PARSER_VERSION):*:*:*:*:*:*:*
 HTTP_PARSER_URL := https://github.com/nodejs/http-parser/archive/v$(HTTP_PARSER_VERSION).tar.gz
 
 PKGS += http_parser

contrib/src/jsoncpp/package.json

 {
     "name": "jsoncpp",
     "version": "1.9.3",
+    "cpe": "cpe:2.3:a:jsoncpp_project:jsoncpp:1.9.3:*:*:*:*:*:*:*",
     "url": "https://github.com/open-source-parsers/jsoncpp/archive/__VERSION__.tar.gz",
     "deps": [],
     "patches": [],

contrib/src/jsoncpp/rules.mak

 # JSONCPP
 JSONCPP_VERSION := 1.9.3
+PKG_CPE += cpe:2.3:a:jsoncpp_project:jsoncpp:$(JSONCPP_VERSION):*:*:*:*:*:*:*
 
 JSONCPP_URL := https://github.com/open-source-parsers/jsoncpp/archive/$(JSONCPP_VERSION).tar.gz