FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Debian > Debian Development

 
 
LinkBack Thread Tools
 
Old 01-31-2011, 10:36 PM
Silvio Cesare
 
Default CPE lists was Equivalent packages between Linux distributions

I created an automatically generated CPE list for Fedora13 packages. It only has 300 or so packages in it, but this will improve as say Debian increase the list of packages they track (they only track 1100 or so currently).


https://github.com/silviocesare/Equivalent-Packages/blob/master/CPE/Fedora13.CPE.generated

To generate the list I build a list of equivalent packages between Debian and Fedora https://github.com/silviocesare/Equivalent-Packages/blob/master/NearestNeighbour/Debian5_Fedora13_Matches. I then use Debian's CPE list http://svn.debian.org/wsvn/secure-testing/data/CPE/list to document the equivalent packages in Fedora.


This should work fine for other Distributions also.

--
Silvio Cesare
 
Old 02-01-2011, 08:58 AM
Petter Reinholdtsen
 
Default CPE lists was Equivalent packages between Linux distributions

[Silvio Cesare]
> I created an automatically generated CPE list for Fedora13
> packages. It only has 300 or so packages in it, but this will
> improve as say Debian increase the list of packages they track (they
> only track 1100 or so currently).
>
> https://github.com/silviocesare/Equivalent-Packages/blob/master/CPE/Fedora13.CPE.generated

Very interesting. I created the CPE entries for Debian manually, by
comparing the set of affected packages reported in the CVE database
for Debian and NVD. Perhaps something similar could be done for
Fedora, assuming the project track CVEs in a structured way?

Note that there are several duplicate CPE entries used by NVD. A list
of the ones I have identified so far is in data/CPE/aliases.

Note that there is a bug in your list. xen is claimed to be
grub-legacy. Perhaps check your code?

Happy hacking,
--
Petter Reinholdtsen


--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 2fllj202i1e.fsf@login2.uio.no">http://lists.debian.org/2fllj202i1e.fsf@login2.uio.no
 

Thread Tools




All times are GMT. The time now is 09:47 PM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org