]> git.feebdaed.xyz Git - 0xmirror/buildroot.git/commit
package/linenoise: add CPE
authorThomas Perale <thomas.perale@mind.be>
Sat, 27 Dec 2025 13:06:10 +0000 (14:06 +0100)
committerJulien Olivain <ju.o@free.fr>
Sat, 27 Dec 2025 14:51:40 +0000 (15:51 +0100)
commit2668d121e5add1f999206b5c43fa325587de81b7
tree0e7ab18f6e36165e456a795e00b39103ac74a6a7
parentef538cf4d9fde8e1e92364906a81310e321703d2
package/linenoise: add CPE

The CPE 'cpe:2.3:a:antirez:linenoise:1.0:*:*:*:*:*:*:*' is valid for the
package linenoise [1].

Since the latest version is '1.0' since 2015 the CPE_ID_VERSION is set
to that version.

The CVE that applies on version 1.0 were checked with the 'cve-check'
script:

```
echo '{"components": [{"bom-ref": "linenoise", "name": "linenoise", "version": "1.0", "cpe": "cpe:2.3:a:antirez:linenoise:1.0:-:*:*:*:*:*:*"}]}' | support/scripts/cve-check | jq -r '.vulnerabilities[].id'
```

Only the CVE-2025-9810 exists and that was fixed in [2].

[1] https://nvd.nist.gov/products/cpe/detail/10423C23-6AAA-439E-B723-1FCDEB3A769F
[2] 3c7cbf97d7 package/linenoise: security bump to version e26268de5e

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
package/linenoise/linenoise.mk