Re: [Misc] how get NVD's CPE Entries managed by ASF

2014-04-16 Thread Niall Pemberton
I dont have any idea - its not something I've ever seen brought up on the mailing lists here. It might be better to email the ASF security list http://www.apache.org/security/ Niall On Wed, Apr 16, 2014 at 3:01 AM, Bernd Eckenfels wrote: > Hello, > > can somebody tell me how CPE Entries (Prod

[Misc] how get NVD's CPE Entries managed by ASF

2014-04-15 Thread Bernd Eckenfels
Hello, can somebody tell me how CPE Entries (Product Dictionary, Common Platform Enumeration) for Apache (Commons) products get populated in the NVD. Is there somewhere an mapping from component to productname stored? And is there an option or plan to specify things like maven coordinates or pack