* [Buildroot] [PATCH 1/2] package/libnids: add LIBNIDS_CPE_ID_VENDOR
@ 2021-05-23 13:29 Fabrice Fontaine
2021-05-23 13:29 ` [Buildroot] [PATCH 2/2] package/libnids: drop LIBNIDS_IGNORE_CVES Fabrice Fontaine
` (2 more replies)
0 siblings, 3 replies; 6+ messages in thread
From: Fabrice Fontaine @ 2021-05-23 13:29 UTC (permalink / raw)
To: buildroot
cpe:2.3:a:libnids_project:libnids is a valid CPE identifier for this
package:
https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Alibnids_project%3Alibnids
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
---
package/libnids/libnids.mk | 1 +
1 file changed, 1 insertion(+)
diff --git a/package/libnids/libnids.mk b/package/libnids/libnids.mk
index fb3df318b4..4a9138b80e 100644
--- a/package/libnids/libnids.mk
+++ b/package/libnids/libnids.mk
@@ -8,6 +8,7 @@ LIBNIDS_VERSION = 1.24
LIBNIDS_SITE = https://sourceforge.net/projects/libnids/files/libnids/$(LIBNIDS_VERSION)
LIBNIDS_LICENSE = GPL-2.0
LIBNIDS_LICENSE_FILES = COPYING
+LIBNIDS_CPE_ID_VENDOR = libnids_project
LIBNIDS_INSTALL_STAGING = YES
LIBNIDS_DEPENDENCIES = host-pkgconf libpcap
LIBNIDS_AUTORECONF = YES
--
2.30.2
^ permalink raw reply related [flat|nested] 6+ messages in thread
* [Buildroot] [PATCH 2/2] package/libnids: drop LIBNIDS_IGNORE_CVES
2021-05-23 13:29 [Buildroot] [PATCH 1/2] package/libnids: add LIBNIDS_CPE_ID_VENDOR Fabrice Fontaine
@ 2021-05-23 13:29 ` Fabrice Fontaine
2021-05-23 18:03 ` Yann E. MORIN
2021-06-08 7:13 ` Peter Korsgaard
2021-05-23 17:58 ` [Buildroot] [PATCH 1/2] package/libnids: add LIBNIDS_CPE_ID_VENDOR Yann E. MORIN
2021-06-08 7:10 ` Peter Korsgaard
2 siblings, 2 replies; 6+ messages in thread
From: Fabrice Fontaine @ 2021-05-23 13:29 UTC (permalink / raw)
To: buildroot
NVD database has been updated:
https://nvd.nist.gov/vuln/search/results?form_type=Advanced&results_type=overview&seach_type=all&query=cpe:2.3:a:libnids_project:libnids:1.24:*:*:*:*:*:*:*
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
---
package/libnids/libnids.mk | 4 ----
1 file changed, 4 deletions(-)
diff --git a/package/libnids/libnids.mk b/package/libnids/libnids.mk
index 4a9138b80e..3e36838c40 100644
--- a/package/libnids/libnids.mk
+++ b/package/libnids/libnids.mk
@@ -13,10 +13,6 @@ LIBNIDS_INSTALL_STAGING = YES
LIBNIDS_DEPENDENCIES = host-pkgconf libpcap
LIBNIDS_AUTORECONF = YES
-# CVE-2010-0751 was fixed in libnids v1.24 but the NVD database is not
-# aware of the fix, ignore it until this is updated
-LIBNIDS_IGNORE_CVES += CVE-2010-0751
-
# disable libnet if not available
# Tests in configure.in expect --with-libnet=$build_dir
# not an installation patch like in our context.
--
2.30.2
^ permalink raw reply related [flat|nested] 6+ messages in thread
* [Buildroot] [PATCH 1/2] package/libnids: add LIBNIDS_CPE_ID_VENDOR
2021-05-23 13:29 [Buildroot] [PATCH 1/2] package/libnids: add LIBNIDS_CPE_ID_VENDOR Fabrice Fontaine
2021-05-23 13:29 ` [Buildroot] [PATCH 2/2] package/libnids: drop LIBNIDS_IGNORE_CVES Fabrice Fontaine
@ 2021-05-23 17:58 ` Yann E. MORIN
2021-06-08 7:10 ` Peter Korsgaard
2 siblings, 0 replies; 6+ messages in thread
From: Yann E. MORIN @ 2021-05-23 17:58 UTC (permalink / raw)
To: buildroot
Fabrice, All,
On 2021-05-23 15:29 +0200, Fabrice Fontaine spake thusly:
> cpe:2.3:a:libnids_project:libnids is a valid CPE identifier for this
> package:
>
> https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Alibnids_project%3Alibnids
>
> Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Applied to master, thanks.
Regards,
Yann E. MORIN.
> ---
> package/libnids/libnids.mk | 1 +
> 1 file changed, 1 insertion(+)
>
> diff --git a/package/libnids/libnids.mk b/package/libnids/libnids.mk
> index fb3df318b4..4a9138b80e 100644
> --- a/package/libnids/libnids.mk
> +++ b/package/libnids/libnids.mk
> @@ -8,6 +8,7 @@ LIBNIDS_VERSION = 1.24
> LIBNIDS_SITE = https://sourceforge.net/projects/libnids/files/libnids/$(LIBNIDS_VERSION)
> LIBNIDS_LICENSE = GPL-2.0
> LIBNIDS_LICENSE_FILES = COPYING
> +LIBNIDS_CPE_ID_VENDOR = libnids_project
> LIBNIDS_INSTALL_STAGING = YES
> LIBNIDS_DEPENDENCIES = host-pkgconf libpcap
> LIBNIDS_AUTORECONF = YES
> --
> 2.30.2
>
> _______________________________________________
> buildroot mailing list
> buildroot at busybox.net
> http://lists.busybox.net/mailman/listinfo/buildroot
--
.-----------------.--------------------.------------------.--------------------.
| Yann E. MORIN | Real-Time Embedded | /"\ ASCII RIBBON | Erics' conspiracy: |
| +33 662 376 056 | Software Designer | \ / CAMPAIGN | ___ |
| +33 561 099 427 `------------.-------: X AGAINST | \e/ There is no |
| http://ymorin.is-a-geek.org/ | _/*\_ | / \ HTML MAIL | v conspiracy. |
'------------------------------^-------^------------------^--------------------'
^ permalink raw reply [flat|nested] 6+ messages in thread
* [Buildroot] [PATCH 2/2] package/libnids: drop LIBNIDS_IGNORE_CVES
2021-05-23 13:29 ` [Buildroot] [PATCH 2/2] package/libnids: drop LIBNIDS_IGNORE_CVES Fabrice Fontaine
@ 2021-05-23 18:03 ` Yann E. MORIN
2021-06-08 7:13 ` Peter Korsgaard
1 sibling, 0 replies; 6+ messages in thread
From: Yann E. MORIN @ 2021-05-23 18:03 UTC (permalink / raw)
To: buildroot
Fabrice, All,
On 2021-05-23 15:29 +0200, Fabrice Fontaine spake thusly:
> NVD database has been updated:
> https://nvd.nist.gov/vuln/search/results?form_type=Advanced&results_type=overview&seach_type=all&query=cpe:2.3:a:libnids_project:libnids:1.24:*:*:*:*:*:*:*
>
> Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Applied to master, thanks.
Regards,
Yann E. MORIN.
> ---
> package/libnids/libnids.mk | 4 ----
> 1 file changed, 4 deletions(-)
>
> diff --git a/package/libnids/libnids.mk b/package/libnids/libnids.mk
> index 4a9138b80e..3e36838c40 100644
> --- a/package/libnids/libnids.mk
> +++ b/package/libnids/libnids.mk
> @@ -13,10 +13,6 @@ LIBNIDS_INSTALL_STAGING = YES
> LIBNIDS_DEPENDENCIES = host-pkgconf libpcap
> LIBNIDS_AUTORECONF = YES
>
> -# CVE-2010-0751 was fixed in libnids v1.24 but the NVD database is not
> -# aware of the fix, ignore it until this is updated
> -LIBNIDS_IGNORE_CVES += CVE-2010-0751
> -
> # disable libnet if not available
> # Tests in configure.in expect --with-libnet=$build_dir
> # not an installation patch like in our context.
> --
> 2.30.2
>
> _______________________________________________
> buildroot mailing list
> buildroot at busybox.net
> http://lists.busybox.net/mailman/listinfo/buildroot
--
.-----------------.--------------------.------------------.--------------------.
| Yann E. MORIN | Real-Time Embedded | /"\ ASCII RIBBON | Erics' conspiracy: |
| +33 662 376 056 | Software Designer | \ / CAMPAIGN | ___ |
| +33 561 099 427 `------------.-------: X AGAINST | \e/ There is no |
| http://ymorin.is-a-geek.org/ | _/*\_ | / \ HTML MAIL | v conspiracy. |
'------------------------------^-------^------------------^--------------------'
^ permalink raw reply [flat|nested] 6+ messages in thread
* [Buildroot] [PATCH 1/2] package/libnids: add LIBNIDS_CPE_ID_VENDOR
2021-05-23 13:29 [Buildroot] [PATCH 1/2] package/libnids: add LIBNIDS_CPE_ID_VENDOR Fabrice Fontaine
2021-05-23 13:29 ` [Buildroot] [PATCH 2/2] package/libnids: drop LIBNIDS_IGNORE_CVES Fabrice Fontaine
2021-05-23 17:58 ` [Buildroot] [PATCH 1/2] package/libnids: add LIBNIDS_CPE_ID_VENDOR Yann E. MORIN
@ 2021-06-08 7:10 ` Peter Korsgaard
2 siblings, 0 replies; 6+ messages in thread
From: Peter Korsgaard @ 2021-06-08 7:10 UTC (permalink / raw)
To: buildroot
>>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice@gmail.com> writes:
> cpe:2.3:a:libnids_project:libnids is a valid CPE identifier for this
> package:
> https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Alibnids_project%3Alibnids
> Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Committed to 2021.02.x, thanks.
--
Bye, Peter Korsgaard
^ permalink raw reply [flat|nested] 6+ messages in thread
* [Buildroot] [PATCH 2/2] package/libnids: drop LIBNIDS_IGNORE_CVES
2021-05-23 13:29 ` [Buildroot] [PATCH 2/2] package/libnids: drop LIBNIDS_IGNORE_CVES Fabrice Fontaine
2021-05-23 18:03 ` Yann E. MORIN
@ 2021-06-08 7:13 ` Peter Korsgaard
1 sibling, 0 replies; 6+ messages in thread
From: Peter Korsgaard @ 2021-06-08 7:13 UTC (permalink / raw)
To: buildroot
>>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice@gmail.com> writes:
> NVD database has been updated:
> https://nvd.nist.gov/vuln/search/results?form_type=Advanced&results_type=overview&seach_type=all&query=cpe:2.3:a:libnids_project:libnids:1.24:*:*:*:*:*:*:*
> Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Committed to 2021.02.x, thanks.
--
Bye, Peter Korsgaard
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2021-06-08 7:13 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-05-23 13:29 [Buildroot] [PATCH 1/2] package/libnids: add LIBNIDS_CPE_ID_VENDOR Fabrice Fontaine
2021-05-23 13:29 ` [Buildroot] [PATCH 2/2] package/libnids: drop LIBNIDS_IGNORE_CVES Fabrice Fontaine
2021-05-23 18:03 ` Yann E. MORIN
2021-06-08 7:13 ` Peter Korsgaard
2021-05-23 17:58 ` [Buildroot] [PATCH 1/2] package/libnids: add LIBNIDS_CPE_ID_VENDOR Yann E. MORIN
2021-06-08 7:10 ` Peter Korsgaard
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.