Bug#797768: systemd: os-release(5) has outdated reference to CPE

[Michael Biebl]

Control: tags -1 + upstream

Hi Ben,

Am 02.09.2015 um 14:13 schrieb Ben Harris:
> Package: systemd
> Version: 224-1
> Severity: minor
> Tags: upstream
> 
> Dear Maintainer,
> 
> os-release(5) includes this description of the "CPE_NAME" parameter:
> 
>        CPE_NAME=
>            A CPE name for the operating system, following the Common
> Platform
>            Enumeration Specification[2] as proposed by the MITRE
> Corporation.
>            This field is optional. Example:
>            "CPE_NAME="cpe:/o:fedoraproject:fedora:17""
> 
> This example name seems to be formatted according to CPE 2.2, which
> specified a single URI-like textual format for CPE Names.  CPE 2.2 was
> superseded in August 2011 by CPE 2.3, which specifies an abstract CPE
> Name and two different textual bindings.  By simply referring to "A CPE
> name", os-release(5) fails to specify which of these formats is meant.
> 
> I'd suggest that the reference be updated to either explicitly refer to
> the URI binding of a CPE name for the operating system, or to explicitly
> refer to CPE 2.2. Since CPE 2.3 URI bindings are meant to be
> backward-compatible with CPE 2.2, I'd suggest that the former is the
> better approach.
> 
> As of CPE 2.3, it seems that NIST have taken over maintenance of CPE, so
> the reference to MITRE should probably be replaced by a reference to
> NIST, and the Web reference changed to point to
> <http://scap.nist.gov/specifications/cpe/>.

Since this is an upstream issue, it would be great if you can file a bug
report at https://github.com/systemd/systemd/issues and report back with
the bug number.

Regards,
Michael

-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-systemd-maintainers/attachments/20150902/57b47bab/attachment-0001.sig>