| Message ID | 20210515112527.2367702-1-fontaine.fabrice@gmail.com |
|---|---|
| State | Accepted |
| Headers | show |
| Series | [1/1] package/refpolicy: fix REFPOLICY_CPE_ID_VENDOR | expand |
Fabrice, All, On 2021-05-15 13:25 +0200, Fabrice Fontaine spake thusly: > cpe:2.3:a:selinuxproject:refpolicy is a valid CPE identifier for this > package: > > https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aselinuxproject%3Arefpolicy > > Indeed, cpe:2.3:a:tresys:refpolicy has been deprecated since April 21th: > > <cpe-item name="cpe:/a:tresys:refpolicy:2.20180701" deprecated="true" deprecation_date="2021-04-21T16:55:43.710Z"> > <title xml:lang="en-US">Tresys refpolicy 2.20180701</title> > <reference href="https://github.com/TresysTechnology/refpolicy">Product</reference> > <cpe-23:cpe23-item name="cpe:2.3:a:tresys:refpolicy:2.20180701:*:*:*:*:*:*:*"> > <cpe-23:deprecated-by name="cpe:2.3:a:selinuxproject:refpolicy:2.20180701:*:*:*:*:*:*:*" type="NAME_CORRECTION"/> > > Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Applied to master, thanks. Regards, Yann E. MORIN. > --- > package/refpolicy/refpolicy.mk | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git a/package/refpolicy/refpolicy.mk b/package/refpolicy/refpolicy.mk > index 0e7dfd86f8..a42483dba2 100644 > --- a/package/refpolicy/refpolicy.mk > +++ b/package/refpolicy/refpolicy.mk > @@ -6,7 +6,7 @@ > > REFPOLICY_LICENSE = GPL-2.0 > REFPOLICY_LICENSE_FILES = COPYING > -REFPOLICY_CPE_ID_VENDOR = tresys > +REFPOLICY_CPE_ID_VENDOR = selinuxproject > REFPOLICY_INSTALL_STAGING = YES > REFPOLICY_DEPENDENCIES = \ > host-m4 \ > -- > 2.30.2 > > _______________________________________________ > buildroot mailing list > buildroot@busybox.net > http://lists.busybox.net/mailman/listinfo/buildroot
>>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice@gmail.com> writes: > cpe:2.3:a:selinuxproject:refpolicy is a valid CPE identifier for this > package: > https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aselinuxproject%3Arefpolicy > Indeed, cpe:2.3:a:tresys:refpolicy has been deprecated since April 21th: > <cpe-item name="cpe:/a:tresys:refpolicy:2.20180701" deprecated="true" deprecation_date="2021-04-21T16:55:43.710Z"> > <title xml:lang="en-US">Tresys refpolicy 2.20180701</title> > <reference href="https://github.com/TresysTechnology/refpolicy">Product</reference> > <cpe-23:cpe23-item name="cpe:2.3:a:tresys:refpolicy:2.20180701:*:*:*:*:*:*:*"> > <cpe-23:deprecated-by name="cpe:2.3:a:selinuxproject:refpolicy:2.20180701:*:*:*:*:*:*:*" type="NAME_CORRECTION"/> > Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Committed to 2021.02.x, thanks.
diff --git a/package/refpolicy/refpolicy.mk b/package/refpolicy/refpolicy.mk index 0e7dfd86f8..a42483dba2 100644 --- a/package/refpolicy/refpolicy.mk +++ b/package/refpolicy/refpolicy.mk @@ -6,7 +6,7 @@ REFPOLICY_LICENSE = GPL-2.0 REFPOLICY_LICENSE_FILES = COPYING -REFPOLICY_CPE_ID_VENDOR = tresys +REFPOLICY_CPE_ID_VENDOR = selinuxproject REFPOLICY_INSTALL_STAGING = YES REFPOLICY_DEPENDENCIES = \ host-m4 \
cpe:2.3:a:selinuxproject:refpolicy is a valid CPE identifier for this package: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Aselinuxproject%3Arefpolicy Indeed, cpe:2.3:a:tresys:refpolicy has been deprecated since April 21th: <cpe-item name="cpe:/a:tresys:refpolicy:2.20180701" deprecated="true" deprecation_date="2021-04-21T16:55:43.710Z"> <title xml:lang="en-US">Tresys refpolicy 2.20180701</title> <reference href="https://github.com/TresysTechnology/refpolicy">Product</reference> <cpe-23:cpe23-item name="cpe:2.3:a:tresys:refpolicy:2.20180701:*:*:*:*:*:*:*"> <cpe-23:deprecated-by name="cpe:2.3:a:selinuxproject:refpolicy:2.20180701:*:*:*:*:*:*:*" type="NAME_CORRECTION"/> Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> --- package/refpolicy/refpolicy.mk | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)