Bug 846809

Summary:	net-misc/curl: CPE in metadata.xml is not known by NIST
Product:	Gentoo Linux	Reporter:	Jonas Stein <jstein>
Component:	Current packages	Assignee:	Anthony Basile <blueness>
Status:	RESOLVED INVALID
Severity:	normal	CC:	ajak, jstein, ulm
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Jonas Stein gentoo-dev

2022-05-21 20:20:27 UTC

curl:curl is not listed in the NIST database

Reproducible: Always

Steps to Reproduce:
1.
grep cpe metadata.xml 
		<remote-id type="cpe">cpe:/a:curl:curl</remote-id>
		<remote-id type="cpe">cpe:/a:curl:libcurl</remote-id>
		<remote-id type="cpe">cpe:/a:haxx:curl</remote-id>
		<remote-id type="cpe">cpe:/a:haxx:libcurl</remote-id>

2. download and extract the database from NIST https://nvd.nist.gov/products/cpe
3. search curl:curl in the database

Comment 1 Sam James archtester

2022-10-01 03:38:43 UTC

As we discussed on IRC at the time, this is a non-issue.