shaba/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2025-03-22 06:50:18 +03:00
Code

Symlink NVD CPE search

Browse Source
This commit is contained in:
Dimitri John Ledkov 2025-02-03 12:00:24 +00:00
parent 355afa9232
commit 656dea9074
No known key found for this signature in database
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
docs/PACKAGE_METADATA_FOR_EXECUTABLE_FILES.md
View File

@ -90,7 +90,7 @@ Value: a single JSON object encoded as a NUL-terminated UTF-8 string
"version":"4711.0815.fc13",
"architecture":"arm32",
"osCpe": "cpe:2.3:o:fedoraproject:fedora:33", # A CPE name for the operating system, `CPE_NAME` from os-release is a good default
"appCpe": "cpe:2.3:a:gnu:coreutils:5.0", # A CPE name for the upstream application, check NVD
"appCpe": "cpe:2.3:a:gnu:coreutils:5.0", # A CPE name for the upstream application, use NVD CPE search
"debugInfoUrl": "https://debuginfod.fedoraproject.org/"
}
```
@ -136,9 +136,11 @@ A set of well-known keys is defined here, and hopefully shared among all vendors
| version | The source package version | 4711.0815.fc13 |
| architecture | The binary package architecture | arm32 |
| osCpe | A CPE name for the OS, typically corresponding to CPE_NAME in os-release | cpe:2.3:o:fedoraproject:fedora:33 |
| appCpe | A CPE name for the upstream Application, check NVD | cpe:2.3:a:gnu:coreutils:5.0 |
| appCpe | A CPE name for the upstream Application, as found in [NVD CPE search] | cpe:2.3:a:gnu:coreutils:5.0 |
| debugInfoUrl | The debuginfod server url, if available | https://debuginfod.fedoraproject.org/ |
[NVD CPE search]: https://nvd.nist.gov/products/cpe/search
### Displaying package notes
The raw ELF section can be extracted using `objdump`: