package/gcc-bare-metal: add CPE variables

cpe:2.3:a:gnu:gcc is a valid CPE identifier for this package:

  https://nvd.nist.gov/products/cpe/detail/A30F1DE7-139B-4296-AA87-A516462A1A81

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Reviewed-by: Neal Frager <neal.frager@amd.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit fccd228bace3ea1cd12b9e3f3a9f989e7f60edb3)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

package/gcc-bare-metal/gcc-bare-metal.mk

@@ -11,6 +11,8 @@ HOST_GCC_BARE_METAL_SOURCE = gcc-$(HOST_GCC_BARE_METAL_VERSION).tar.xz
 
 HOST_GCC_BARE_METAL_LICENSE = GPL-2.0, GPL-3.0, LGPL-2.1, LGPL-3.0
 HOST_GCC_BARE_METAL_LICENSE_FILES = COPYING COPYING3 COPYING.LIB COPYING3.LIB
+HOST_GCC_BARE_METAL_CPE_ID_VENDOR = gnu
+HOST_GCC_BARE_METAL_CPE_ID_PRODUCT = gcc
 
 HOST_GCC_BARE_METAL_DEPENDENCIES = \
 	host-binutils-bare-metal \