Re: Auditing CPE names

2017-02-13 Thread Ludovic Courtès
Leo Famulari skribis: > On Sat, Feb 11, 2017 at 02:53:46PM -0500, Leo Famulari wrote: >> It's important to name the package in accordance with the CPE or set >> the cpe-name property, or else `guix lint -c cve` won't work for that >> package. > > In commit 84b60a7cdfc (gnu: lcms: Fix an out-of-bo

Re: Auditing CPE names

2017-02-12 Thread Leo Famulari
On Sat, Feb 11, 2017 at 02:53:46PM -0500, Leo Famulari wrote: > It's important to name the package in accordance with the CPE or set > the cpe-name property, or else `guix lint -c cve` won't work for that > package. In commit 84b60a7cdfc (gnu: lcms: Fix an out-of-bounds read.) I tried to set the c

Re: Auditing CPE names

2017-02-12 Thread Ludovic Courtès
Leo Famulari skribis: > I wonder if anyone checks the Common Platform Enumeration (CPE) names of > new packages when creating them? > > It's important to name the package in accordance with the CPE or set > the cpe-name property, or else `guix lint -c cve` won't work for that > package. > > There