846809 – net-misc/curl: CPE in metadata.xml is not known by NIST

Bug 846809 - net-misc/curl: CPE in metadata.xml is not known by NIST

Summary: net-misc/curl: CPE in metadata.xml is not known by NIST

Status:	RESOLVED INVALID

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Anthony Basile

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2022-05-21 20:20 UTC by Jonas Stein
Modified:	2022-10-01 03:38 UTC (History)
CC List:	3 users (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Jonas Stein gentoo-dev

2022-05-21 20:20:27 UTC

curl:curl is not listed in the NIST database

Reproducible: Always

Steps to Reproduce:
1.
grep cpe metadata.xml 
		<remote-id type="cpe">cpe:/a:curl:curl</remote-id>
		<remote-id type="cpe">cpe:/a:curl:libcurl</remote-id>
		<remote-id type="cpe">cpe:/a:haxx:curl</remote-id>
		<remote-id type="cpe">cpe:/a:haxx:libcurl</remote-id>

2. download and extract the database from NIST https://nvd.nist.gov/products/cpe
3. search curl:curl in the database

Comment 1 Sam James archtester

2022-10-01 03:38:43 UTC

As we discussed on IRC at the time, this is a non-issue.