Re: git: 11541a41fc51 - main - lang/njs: Revert CPE_VENDOR now that NIST has deprecated nginx:njs
- Reply: Sergey A. Osokin: "Re: git: 11541a41fc51 - main - lang/njs: Revert CPE_VENDOR now that NIST has deprecated nginx:njs"
- In reply to: Sergey A. Osokin: "Re: git: 11541a41fc51 - main - lang/njs: Revert CPE_VENDOR now that NIST has deprecated nginx:njs"
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Fri, 25 Mar 2022 21:19:44 UTC
Hi Sergey, there is no need to set CPE_PRODUCT explicitly because it defaults to PORTNAME which is the same. The only relevant variable that needs to be checked is CPE_STR and that one is correct now. % make -V CPE_STR cpe:2.3:a:f5:njs:0.7.2:::::freebsd13:x64:1 ---- On Fri, 25 Mar 2022 14:15:27 +0100 Sergey A. Osokin <osa@freebsd.org> wrote ---- > Hi Bernhard, > > would you mind to revert removed product name back as well? > > Thank you. > > -- > Sergey A. Osokin > > On Fri, Mar 25, 2022 at 01:05:28PM +0000, Bernhard Froehlich wrote: > > The branch main has been updated by decke: > > > > URL: https://cgit.FreeBSD.org/ports/commit/?id=11541a41fc51a0cdc6d4d03a7e9ac147618f0a03 > > > > commit 11541a41fc51a0cdc6d4d03a7e9ac147618f0a03 > > Author: Bernhard Froehlich <decke@FreeBSD.org> > > AuthorDate: 2022-03-25 13:03:47 +0000 > > Commit: Bernhard Froehlich <decke@FreeBSD.org> > > CommitDate: 2022-03-25 13:03:47 +0000 > > > > lang/njs: Revert CPE_VENDOR now that NIST has deprecated nginx:njs > > > > Submitted by: osa@ > > See: https://nvd.nist.gov/vuln/detail/CVE-2021-46463#VulnChangeHistorySection > > --- > > lang/njs/Makefile | 2 +- > > 1 file changed, 1 insertion(+), 1 deletion(-) > > > > diff --git a/lang/njs/Makefile b/lang/njs/Makefile > > index 53529f671ecc..ca2f303d6850 100644 > > --- a/lang/njs/Makefile > > +++ b/lang/njs/Makefile > > @@ -13,7 +13,7 @@ LICENSE_FILE= ${WRKSRC}/LICENSE > > > > USES= cpe > > > > -CPE_VENDOR= nginx > > +CPE_VENDOR= f5 > > > > USE_GITHUB= yes > > GH_TUPLE= nginx:njs:0.7.2 >