From 06c5c2d41ee00b57d01120e81c4440950331b7f9 Mon Sep 17 00:00:00 2001 From: Nicolas Graves Date: Fri, 7 Mar 2025 14:40:06 +0100 Subject: [PATCH] gnu: git: Use lint-hidden-cpe-vendors. * gnu/packages/version-control.scm (git-minimal, git)[properties]: Use lint-hidden-cpe-vendors in place of lint-hidden-cve. Signed-off-by: Zheng Junjie --- gnu/packages/version-control.scm | 15 +-------------- 1 file changed, 1 insertion(+), 14 deletions(-) diff --git a/gnu/packages/version-control.scm b/gnu/packages/version-control.scm index c53fc0c64f84599d4563ae352a21959b61d43301..e3bb0992b1613d3ffd8dcda2311a40571e59f519 100644 --- a/gnu/packages/version-control.scm +++ b/gnu/packages/version-control.scm @@ -591,20 +591,7 @@ Python 3.3 and later, rather than on Python 2.") (description "Git is a free distributed version control system designed to handle everything from small to very large projects with speed and efficiency.") - ;; XXX: Ignore this CVE to work around a name clash with the unrelated - ;; "cpe:2.3:a:jenkins:git" package. The proper fix is for (guix cve) to - ;; account for "vendor names". - (properties '((lint-hidden-cve . ("CVE-2018-1000182" - "CVE-2018-1000110" - "CVE-2019-1003010" - "CVE-2020-2136" - "CVE-2021-21684" - "CVE-2022-30947" - "CVE-2022-30948" - "CVE-2022-30949" - "CVE-2022-36882" - "CVE-2022-36883" - "CVE-2022-36884")) + (properties '((lint-hidden-cpe-vendors . ("jenkins")) (upstream-name . "git"))) (license license:gpl2) (home-page "https://git-scm.com/")))