Return-Path: X-Original-To: apmail-commons-dev-archive@www.apache.org Delivered-To: apmail-commons-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id C884A11578 for ; Wed, 16 Apr 2014 02:02:16 +0000 (UTC) Received: (qmail 62832 invoked by uid 500); 16 Apr 2014 02:02:13 -0000 Delivered-To: apmail-commons-dev-archive@commons.apache.org Received: (qmail 62743 invoked by uid 500); 16 Apr 2014 02:02:13 -0000 Mailing-List: contact dev-help@commons.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Commons Developers List" Delivered-To: mailing list dev@commons.apache.org Received: (qmail 62732 invoked by uid 99); 16 Apr 2014 02:02:12 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 16 Apr 2014 02:02:12 +0000 X-ASF-Spam-Status: No, hits=-0.7 required=5.0 tests=RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: local policy includes SPF record at spf.trusted-forwarder.org) Received: from [209.85.216.179] (HELO mail-qc0-f179.google.com) (209.85.216.179) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 16 Apr 2014 02:02:07 +0000 Received: by mail-qc0-f179.google.com with SMTP id m20so11280504qcx.24 for ; Tue, 15 Apr 2014 19:01:46 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:date:from:to:subject:message-id:mime-version :content-type:content-transfer-encoding; bh=yB0Qy02PpeinCkGJyp5AtoyBoojQ2wTjyQKHQUL6Mc8=; b=nCv8umbCkwq1osDnRkf2awnrSpp9lN14tdy4aloDzW/MLzfX5cXIE6+lEmFDktaSuB NI/+Ae82XaPvDuzTWCmaxarPsKh59drGiYVxmqP+Dti9sBbrWde7W5+04zU+dfBTKQVp XKS0BsoZmfCsuDZufY7ZpX+/Rx3xTdO8LQgAbOQeAKA4no1K0TwYkSdC/JKJkJJavh/I gf+yk9KMkGSlTcGBEFAoMAMLaaphNq66gDxErVschOH8iAi7XqYcSfnu/VFh+wuAlz51 AKD2jpshFY2gOgRBlMibu5DpID9UNukOgGv7PHXgzcAv2tGv1IvjzlGqvk4q9PTrIHbj lcQg== X-Gm-Message-State: ALoCoQlBPwoCbertKylFm7EISVCWdWIVfyL7sE30pXtyGaHbwKjJ7G+2jxP3Sjtrr/L9v7icsBz1 X-Received: by 10.140.29.130 with SMTP id b2mr6722107qgb.48.1397613706135; Tue, 15 Apr 2014 19:01:46 -0700 (PDT) Received: from localhost (HSI-KBW-37-209-111-144.hsi15.kabel-badenwuerttemberg.de. [37.209.111.144]) by mx.google.com with ESMTPSA id j16sm16298587qgd.14.2014.04.15.19.01.45 for (version=TLSv1.2 cipher=RC4-SHA bits=128/128); Tue, 15 Apr 2014 19:01:46 -0700 (PDT) Date: Wed, 16 Apr 2014 04:01:41 +0200 From: Bernd Eckenfels To: dev@commons.apache.org Subject: [Misc] how get NVD's CPE Entries managed by ASF Message-ID: <20140416040141.00007916.ecki@zusammenkunft.net> MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org Hello, can somebody tell me how CPE Entries (Product Dictionary, Common Platform Enumeration) for Apache (Commons) products get populated in the NVD. Is there somewhere an mapping from component to productname stored? And is there an option or plan to specify things like maven coordinates or package names to allow further usefullness of product records? If not here, is this a infra- or a repository- topic? Sample: http://web.nvd.nist.gov/view/cpe/detail?keyword=fileupload&nonDeprecatedOnly=true&cpeId=191948 --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org For additional commands, e-mail: dev-help@commons.apache.org