Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 24 Sep 2015 19:48:35 -0700
From:      Mark Foster <mark@foster.cc>
To:        marquis@roble.com
Cc:        freebsd-security@freebsd.org
Subject:   Re: vuln.xml to oval script?
Message-ID:  <CF94F9A6-8A07-4F02-8F51-A5C876E331A3@foster.cc>
In-Reply-To: <20150924211000.4B6DE123189@mail.foster.cc>
References:  <20150924211000.4B6DE123189@mail.foster.cc>

next in thread | previous in thread | raw e-mail | index | archive | help
I have this some though a couple of years ago. Some of the attributes didn't=
 seem to map cleanly. I think the conversion would be possible once the fiel=
d map was figured out.
The date time and version representations in particular would need massaging=
.
Also I recall OVAL has some variations like remediation that go beyond what v=
uln.xml contains.


> On Sep 24, 2015, at 2:09 PM, Roger Marquis <marquis@roble.com> wrote:
>=20
> Anyone familiar with the OS repositories for OVAL
> <http://oval.mitre.org/repository/>?  Considering how similar these dbs ar=
e to
> vuln.xml it seems odd that FreeBSD is not represented as a "supported
> operating system".
>=20
> If any XML devs are reading this, how difficult would it be to write a
> translation script?
>=20
> Roger Marquis
>=20
> _______________________________________________
> freebsd-security@freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-security
> To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org=
"



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CF94F9A6-8A07-4F02-8F51-A5C876E331A3>