~ruther/guix-local: gnu: git: Use lint-hidden-cpe-vendors.

06c5c2d41ee00b57d01120e81c4440950331b7f9 — Nicolas Graves 1 year, 4 months ago eecd00e

gnu: git: Use lint-hidden-cpe-vendors.

* gnu/packages/version-control.scm (git-minimal, git)[properties]: Use
lint-hidden-cpe-vendors in place of lint-hidden-cve.

Signed-off-by: Zheng Junjie <z572@z572.online>

patch browse .tar.gz .zip

1 files changed, 1 insertions(+), 14 deletions(-)

M gnu/packages/version-control.scm

M gnu/packages/version-control.scm => gnu/packages/version-control.scm +1 -14

@@ 591,20 591,7 @@ Python 3.3 and later, rather than on Python 2.")
     (description
      "Git is a free distributed version control system designed to handle
 everything from small to very large projects with speed and efficiency.")
-    ;; XXX: Ignore this CVE to work around a name clash with the unrelated
-    ;; "cpe:2.3:a:jenkins:git" package.  The proper fix is for (guix cve) to
-    ;; account for "vendor names".
-    (properties '((lint-hidden-cve . ("CVE-2018-1000182"
-                                      "CVE-2018-1000110"
-                                      "CVE-2019-1003010"
-                                      "CVE-2020-2136"
-                                      "CVE-2021-21684"
-                                      "CVE-2022-30947"
-                                      "CVE-2022-30948"
-                                      "CVE-2022-30949"
-                                      "CVE-2022-36882"
-                                      "CVE-2022-36883"
-                                      "CVE-2022-36884"))
+    (properties '((lint-hidden-cpe-vendors . ("jenkins"))
                   (upstream-name . "git")))
     (license license:gpl2)
     (home-page "https://git-scm.com/")))