AlmaLinux / build-system

The AlmaLinux OS project Build System documentation and issue tracker.
Creative Commons Attribution Share Alike 4.0 International
26 stars 9 forks source link

Plan support for VEX formatted advisories #244

Open forbiddenpotato opened 3 months ago

forbiddenpotato commented 3 months ago

Red Had intend to publish new advisories in new format, Vulnerability Exploitability eXchange (VEX), instead of OVAL.

https://www.redhat.com/en/blog/vulnerability-exploitability-exchange-vex-beta-files-now-available

We need to make sure our system interpret advisories in VEX correctly.

forbiddenpotato commented 3 months ago

OVAL will be deprecated at the end of 2024, so we need to adapt before that.