Re: [ptxdist] [PATCH 1/3] RFC: ptxd_make_world: Extract CPE for packages

2024-03-04 Thread Michael Olbrich
On Mon, Feb 19, 2024 at 05:56:15PM +0100, Simon Falsig wrote: > If a package specifies a CPE or CPE_VENDOR and CPE_PRODUCT, this is > extracted into the fast report for that package. If no CPE is > specified, or not both of CPE_VENDOR and CPE_PRODUCT, then no value is > added. > > By default, the

[ptxdist] [PATCH 1/3] RFC: ptxd_make_world: Extract CPE for packages

2024-02-19 Thread Simon Falsig
If a package specifies a CPE or CPE_VENDOR and CPE_PRODUCT, this is extracted into the fast report for that package. If no CPE is specified, or not both of CPE_VENDOR and CPE_PRODUCT, then no value is added. By default, the existing VERSION is used, but can be overridden with CPE_VERSION.

Re: [ptxdist] [PATCH 1/3] RFC: ptxd_make_world: Extract CPE for packages

2023-09-14 Thread Simon Falsig
Hi Christian, > From: Christian Melki > Sent: Wednesday, September 13, 2023 23:17 > > On 9/13/23 18:05, Simon Falsig wrote: > > From: Simon Falsig > > > > If a package specifies a CPE, this is extracted into the fast report > > for that package. If no CPE is specified, then no value is added.

Re: [ptxdist] [PATCH 1/3] RFC: ptxd_make_world: Extract CPE for packages

2023-09-13 Thread Christian Melki
On 9/13/23 18:05, Simon Falsig wrote: > From: Simon Falsig > > If a package specifies a CPE, this is extracted into the fast report for > that package. If no CPE is specified, then no value is added. > > The CPE (Common Platform Enumerator) allows matching CVEs to specific > packages, and see

[ptxdist] [PATCH 1/3] RFC: ptxd_make_world: Extract CPE for packages

2023-09-13 Thread Simon Falsig
From: Simon Falsig If a package specifies a CPE, this is extracted into the fast report for that package. If no CPE is specified, then no value is added. The CPE (Common Platform Enumerator) allows matching CVEs to specific packages, and see if these apply to a specific deployment. ---