Bug 198239 - editors/emacs-devel: add CPE information
Summary: editors/emacs-devel: add CPE information
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: Ashish SHUKLA
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2015-03-03 18:05 UTC by shun
Modified: 2015-03-23 14:17 UTC (History)
0 users

See Also:
bugzilla: maintainer-feedback? (ashish)


Attachments
Makefile with CPE information added (651 bytes, patch)
2015-03-03 18:05 UTC, shun
no flags Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description shun 2015-03-03 18:05:21 UTC
Created attachment 153724 [details]
Makefile with CPE information added

editors/emacs-devel has had vulnerabilities with a CPE identifier assigned (e.g. CVE-2008-2142). This patch add CPE information as suggested in the FreeBSD wiki[0].

[0] https://wiki.freebsd.org/Ports/CPE
Comment 1 Ashish SHUKLA freebsd_committer freebsd_triage 2015-03-09 09:16:47 UTC
(In reply to shun from comment #0)

Hi,

Thanks for the diff. I'm working on an emacs-devel port update, and I'll include these changes with it.

Also, adding explicit CPE_VERSION, since by default CPE_VERSION is set to PORTVERSION, which results in following value of CPE_STR:

cpe:2.3:a:gnu:emacs:25.0.50.20150206.5c9ad35f:::::freebsd10:x64

After the change:

+CPE_VERSION=   ${EMACS_VER}

value of CPE_STR results in:

cpe:2.3:a:gnu:emacs:25.0.50:::::freebsd10:x64

Does this make sense, or should I remove this CPE_VERSION change?

Thanks
Ashish
Comment 2 shun 2015-03-09 09:42:24 UTC
(In reply to Ashish SHUKLA from comment #1)

> After the change:
>
> +CPE_VERSION=   ${EMACS_VER}

Yes, that is correct. I did not pay full attention testing the patch. Thank you for catching it.

shun
Comment 3 Ashish SHUKLA freebsd_committer freebsd_triage 2015-03-23 14:17:19 UTC
Committed in r381999[1].

Thanks!

[1] https://svnweb.freebsd.org/ports?view=revision&revision=381999