[<prev] [next>] [day] [month] [year] [list]
Message-ID: <CANnUo4JFixDvNxLPLZtEE_TWV3+Aafw5kYGf20xgkFjZRuKuDA@mail.gmail.com>
Date: Tue, 10 Apr 2018 12:18:11 +0100
From: Mark Cox <mjc@...che.org>
To: oss-security@...ts.openwall.com
Subject: Change to ASF httpd vulnerability XML format
Various OSS projects I've been involved with use a master vulnerability
database in XML used for various internal functions such as generating web
pages. I know some folks monitor or use/convert these XML feeds too even
though we've not really publicised them or given them a schema.
Later today I will be performing a major update to the Apache HTTP Server
XML file[1] so that each CVE has a unique entry (rather than currently
where the issues are repeated for each major version affected). This
brings it more into line with the OpenSSL XML file[2] and allows us to
automate more of our release process (i.e. generating the required JSON for
Mitre CVE submissions).
Some entries will have other minor updates to their text and to fix link
locations so if you are monitoring the html pages you will see some minor
changes at that time.
Regards, Mark J Cox
[1] https://httpd.apache.org/security/vulnerabilities-httpd.xml
[2] https://www.openssl.org/news/vulnerabilities.xml
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
