commons-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Niall Pemberton <niall.pember...@gmail.com>
Subject Re: [Misc] how get NVD's CPE Entries managed by ASF
Date Wed, 16 Apr 2014 23:19:32 GMT
I dont have any idea - its not something I've ever seen brought up on the
mailing lists here.

It might be better to email the ASF security list

http://www.apache.org/security/

Niall


On Wed, Apr 16, 2014 at 3:01 AM, Bernd Eckenfels <ecki@zusammenkunft.net>wrote:

> Hello,
>
> can somebody tell me how CPE Entries (Product Dictionary, Common
> Platform Enumeration) for Apache (Commons) products get populated in the
> NVD. Is there somewhere an mapping from component to productname stored?
>
> And is there an option or plan to specify things like maven coordinates
> or package names to allow further usefullness of product records?
>
> If not here, is this a infra- or a repository- topic?
>
> Sample:
>
> http://web.nvd.nist.gov/view/cpe/detail?keyword=fileupload&nonDeprecatedOnly=true&cpeId=191948
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
> For additional commands, e-mail: dev-help@commons.apache.org
>
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message