guix-commits
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

02/02: gnu: git: Hide CVEs from the linter.


From: guix-commits
Subject: 02/02: gnu: git: Hide CVEs from the linter.
Date: Tue, 17 Aug 2021 14:34:16 -0400 (EDT)

bricewge pushed a commit to branch master
in repository guix.

commit ea04295256329511b3201feaefb17900b05053b0
Author: Brice Waegeneire <brice@waegenei.re>
AuthorDate: Tue Aug 17 20:25:52 2021 +0200

    gnu: git: Hide CVEs from the linter.
    
    * gnu/packages/version-control.scm (git)[properties]: Set 'properties'
      field.
---
 gnu/packages/version-control.scm | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/gnu/packages/version-control.scm b/gnu/packages/version-control.scm
index 15f68ec..22bf9b4 100644
--- a/gnu/packages/version-control.scm
+++ b/gnu/packages/version-control.scm
@@ -538,6 +538,13 @@ as well as the classic centralized workflow.")
    (description
     "Git is a free distributed version control system designed to handle
 everything from small to very large projects with speed and efficiency.")
+   ;; XXX: Ignore this CVE to work around a name clash with the unrelated
+   ;; "cpe:2.3:a:jenkins:git" package.  The proper fix is for (guix cve) to
+   ;; account for "vendor names".
+   (properties '((lint-hidden-cve . ("CVE-2018-1000182"
+                                     "CVE-2018-1000110"
+                                     "CVE-2019-1003010"
+                                     "CVE-2020-2136"))))
    (license license:gpl2)
    (home-page "https://git-scm.com/";)))
 



reply via email to

[Prev in Thread] Current Thread [Next in Thread]