[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Request for vuln file formats

To: Kurt Seifried <kseifried@redhat.com>
Subject: Re: Request for vuln file formats
From: Mark J Cox <mjc@redhat.com>
Date: Sun, 18 Dec 2016 09:46:26 +0000
Authentication-results: spf=none (sender IP is 129.83.29.2) smtp.mailfrom=LISTS.MITRE.ORG; mitre.mail.onmicrosoft.com; dkim=none (message not signed) header.d=none;mitre.mail.onmicrosoft.com; dmarc=none action=none header.from=redhat.com;mitre.org; dkim=none (message not signed) header.d=none;
Cc: cve-editorial-board-list <cve-editorial-board-list@LISTS.MITRE.ORG>
Delivery-date: Mon Dec 19 07:51:02 2016
In-reply-to: <CANO=Ty3t_h-wR-wzB5a6fYenNfL-W-+UaQamBxJ41NETj0P5Hw@mail.gmail.com>
List-help: <mailto:LISTSERV@LISTS.MITRE.ORG?body=INFO%20CVE-EDITORIAL-BOARD-LIST>
List-owner: <mailto:CVE-EDITORIAL-BOARD-LIST-request@LISTS.MITRE.ORG>
List-subscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-subscribe-request@LISTS.MITRE.ORG>
List-unsubscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-unsubscribe-request@LISTS.MITRE.ORG>
References: <CANO=Ty3t_h-wR-wzB5a6fYenNfL-W-+UaQamBxJ41NETj0P5Hw@mail.gmail.com>
Sender: <owner-cve-editorial-board-list@lists.mitre.org>
Spamdiagnosticmetadata: 6cdb8bfc89744bd8bfee511e3e65aa05
Spamdiagnosticoutput: 1:2

So I'm officially requesting on behalf of the DWF (and I guess the CVE
automation group to) copies/examples of the XML formats, they can be 
blank
templates or filled out ones (or ideally a copy of both). I can't
comment/consider/see what your concerns are unless you show them to me.
Intel has already helpfully shared their spreadsheet which they use to
generate their data which as we all know was very helpful.

This is the format Apache/OpenSSL currently use (which is used viastylesheets to generate web pages):


http://httpd.apache.org/security/vulnerabilities-httpd.xml
https://www.openssl.org/news/vulnerabilities.xml

Mark

References:
- Request for vuln file formats
  - From: Kurt Seifried <kseifried@redhat.com>

Prev by Date: Request for vuln file formats
Next by Date: what text is being sent to researchers re: OSS assignments?
Previous by thread: Request for vuln file formats
Next by thread: what text is being sent to researchers re: OSS assignments?
Index(es):
- Date
- Thread