Re: git: 11541a41fc51 - main - lang/njs: Revert CPE_VENDOR now that NIST has deprecated nginx:njs
- Reply: Sergey A. Osokin: "Re: git: 11541a41fc51 - main - lang/njs: Revert CPE_VENDOR now that NIST has deprecated nginx:njs"
- In reply to: Sergey A. Osokin: "Re: git: 11541a41fc51 - main - lang/njs: Revert CPE_VENDOR now that NIST has deprecated nginx:njs"
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Fri, 25 Mar 2022 21:19:44 UTC
Hi Sergey,
there is no need to set CPE_PRODUCT explicitly because it defaults to PORTNAME
which is the same. The only relevant variable that needs to be checked is CPE_STR
and that one is correct now.
% make -V CPE_STR
cpe:2.3:a:f5:njs:0.7.2:::::freebsd13:x64:1
---- On Fri, 25 Mar 2022 14:15:27 +0100 Sergey A. Osokin <osa@freebsd.org> wrote ----
> Hi Bernhard,
>
> would you mind to revert removed product name back as well?
>
> Thank you.
>
> --
> Sergey A. Osokin
>
> On Fri, Mar 25, 2022 at 01:05:28PM +0000, Bernhard Froehlich wrote:
> > The branch main has been updated by decke:
> >
> > URL: https://cgit.FreeBSD.org/ports/commit/?id=11541a41fc51a0cdc6d4d03a7e9ac147618f0a03
> >
> > commit 11541a41fc51a0cdc6d4d03a7e9ac147618f0a03
> > Author: Bernhard Froehlich <decke@FreeBSD.org>
> > AuthorDate: 2022-03-25 13:03:47 +0000
> > Commit: Bernhard Froehlich <decke@FreeBSD.org>
> > CommitDate: 2022-03-25 13:03:47 +0000
> >
> > lang/njs: Revert CPE_VENDOR now that NIST has deprecated nginx:njs
> >
> > Submitted by: osa@
> > See: https://nvd.nist.gov/vuln/detail/CVE-2021-46463#VulnChangeHistorySection
> > ---
> > lang/njs/Makefile | 2 +-
> > 1 file changed, 1 insertion(+), 1 deletion(-)
> >
> > diff --git a/lang/njs/Makefile b/lang/njs/Makefile
> > index 53529f671ecc..ca2f303d6850 100644
> > --- a/lang/njs/Makefile
> > +++ b/lang/njs/Makefile
> > @@ -13,7 +13,7 @@ LICENSE_FILE= ${WRKSRC}/LICENSE
> >
> > USES= cpe
> >
> > -CPE_VENDOR= nginx
> > +CPE_VENDOR= f5
> >
> > USE_GITHUB= yes
> > GH_TUPLE= nginx:njs:0.7.2
>