search

strawgate / C3-Patch

Other
5 stars 2 forks source link

Add CPE IDs to C3 Patch Fixlets #14

Closed strawgate closed 7 years ago

strawgate commented 8 years ago

From Geroid:

https://cpe.mitre.org/1 https://scap.nist.gov/specifications/cpe/1 Have a skim.

Here's the dictionary itself: https://nvd.nist.gov/cpe.cfm1

And example - I've searched the dictionary for 7Zip. https://web.nvd.nist.gov/view/cpe/search/results?keyword=7zip&status=FINAL&orderBy=CPEURI&namingFormat=2.31

Should aid in automated resolution of CVEs or at least for targeting fixlets by a known parameter instead of whatever naming convention i'm using on that day

strawgate commented 8 years ago

The build engine is being updated for other reasons and this will be included in that update. CPE-IDs will start appearing in Fixlets starting alphabetically (so 7-zip, then Air, then Atom, then Audacity, ...) as this build engine update is rolled out.

ETA is end of this week

strawgate commented 8 years ago

On track for end of week release - the build engine update is about 30% rolled out

strawgate commented 8 years ago

Build engine is about 70% rolled out. On track for 10/11 release.

strawgate commented 7 years ago

Done!