Re: Equivalent packages between Linux distributions
Petter Reinholdtsen wrote:
[...]
> It would be great if you or someone else could provide a mapping from
> distribution packages to CPE entries. :)
It would be great if anyone could make any progress on that.
Some time ago it was mentioned as a possible way to automate the processing
of new CVE ids (i.e. when MITRE publishes the description and other info)
and to detect incorrect Not-For-Us entries in the security tracker.
One way to get started is by using the tracker's list of affected packages
per CVE and match them with the CPEs provided by MITRE. It would be even
better if in the future that information is provided by source packages
themselves.
Cheers,
--
Raphael Geissert - Debian Developer
www.debian.org - get.debian.net
Reply to: