[Buildroot] [External] Re: [PATCH 1/1] package/libnids: NVD database has been updated

[Matthew Weber]

Thomas,


On Wed, Aug 5, 2020 at 2:51 PM Thomas Petazzoni
<thomas.petazzoni at bootlin.com> wrote:
>
> Hello,
>
> On Wed, 5 Aug 2020 11:18:24 -0500
> Matthew Weber <matthew.weber at collins.com> wrote:
>
> > It has been fixed but I had to update the wiki notes because there are two
> > steps.  The first is a CVE description update by the Mitre/CVE team and the
> > second is a CPE assignment update by the dictionary team.  I checked the
> > NVD link that Thomas provided and it looks correct to me.
>
> Thanks for following up on this. However, what the Wiki page says is
> not very clear to me as it doesn't really seem to match what you're
> saying here with the two steps process that is needed.
>

Hopefully this is a little better
https://elinux.org/Buildroot:Security_Vulnerability_Management#Managing_CPE_entries