Bug 199513

Summary: net/chrony: add CPE information
Product: Ports & Packages Reporter: Jan Beich <jbeich>
Component: Individual Port(s)Assignee: Bartek Rutkowski <robak>
Status: Closed FIXED    
Severity: Affects Only Me CC: masaki, robak
Priority: --- Keywords: patch
Version: LatestFlags: bugzilla: maintainer-feedback? (masaki)
Hardware: Any   
OS: Any   
URL: https://wiki.freebsd.org/Ports/CPE
Attachments:
Description Flags
v0 jbeich: maintainer-approval? (masaki)

Description Jan Beich freebsd_committer freebsd_triage 2015-04-18 09:25:07 UTC
+++ This bug was initially created as a clone of Bug #199505 +++

NVD provides example CPE string under Configuration 2 in
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1821

  $ make -V CPE_STR PORTVERSION=1.31
  cpe:2.3:a:tuxfamily:chrony:1.31:::::freebsd11:x64

  # before ports r362439 (CPE v2.2)
  $ make -V CPE_URI PORTVERSION=1.31
  cpe:/a:tuxfamily:chrony:1.31::~~~freebsd~~

It may help pkg-audit(8) in future to notice vulnerabilities earlier.
Comment 1 Bartek Rutkowski freebsd_committer freebsd_triage 2015-04-20 11:58:38 UTC
Jan, havent you forgot to upload a patch?
Comment 2 Jan Beich freebsd_committer freebsd_triage 2015-04-20 13:29:46 UTC
Created attachment 155769 [details]
v0

Indeed.
Comment 3 commit-hook freebsd_committer freebsd_triage 2015-04-22 11:43:16 UTC
A commit references this bug:

Author: robak
Date: Wed Apr 22 11:43:13 UTC 2015
New revision: 384486
URL: https://svnweb.freebsd.org/changeset/ports/384486

Log:
  net/chrony: add CPE info

  PR:		199513
  Submitted by:	jbeich
  Approved by:	portmgr blanket

Changes:
  head/net/chrony/Makefile
Comment 4 Bartek Rutkowski freebsd_committer freebsd_triage 2015-04-22 11:43:39 UTC
Committed, thanks for your work!