Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: drop gpgme CPE ID without CVEs #3632

Merged
merged 1 commit into from
Dec 19, 2023
Merged

Conversation

ffontaine
Copy link
Contributor

@ffontaine ffontaine changed the title fix: drop gpgme CPE ID without 0 CVEs fix: drop gpgme CPE ID with 0 CVEs Dec 19, 2023
gpupg:gpgme is a CPE ID without any CVEs so drop it:
https://www.cvedetails.com/vulnerability-list/vendor_id-4711/product_id-94121/Gnupg-Gpgme.html

Signed-off-by: Fabrice Fontaine <fabrice.fontaine@orange.com>
@ffontaine ffontaine changed the title fix: drop gpgme CPE ID with 0 CVEs fix: drop gpgme CPE ID without CVEs Dec 19, 2023
@codecov-commenter
Copy link

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (a168298) 77.76% compared to head (3570eb8) 78.21%.
Report is 4 commits behind head on main.

❗ Current head 3570eb8 differs from pull request most recent head 47fa608. Consider uploading reports for the commit 47fa608 to get more accurate results

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #3632      +/-   ##
==========================================
+ Coverage   77.76%   78.21%   +0.44%     
==========================================
  Files         781      783       +2     
  Lines       11700    11710      +10     
  Branches     1369     1369              
==========================================
+ Hits         9099     9159      +60     
+ Misses       2183     2130      -53     
- Partials      418      421       +3     
Flag Coverage Δ
win-longtests 78.21% <100.00%> (+0.44%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Copy link
Contributor

@terriko terriko left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Seems reasonable to remove. I wonder if we should be asking NVD to remove some of these no longer relevant CPEs?

@terriko terriko merged commit 25dc81f into intel:main Dec 19, 2023
21 checks passed
@ffontaine
Copy link
Contributor Author

Indeed, it would be great if the NVD database could be updated. However, I've never sent such kind of request, I don't know how much energy it would take to get it done.

inosmeet pushed a commit to inosmeet/cve-bin-tool that referenced this pull request Feb 16, 2024
gpupg:gpgme is a CPE ID without any CVEs so drop it:
https://www.cvedetails.com/vulnerability-list/vendor_id-4711/product_id-94121/Gnupg-Gpgme.html

Signed-off-by: Fabrice Fontaine <fabrice.fontaine@orange.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants