CVE/OVAL Support

Support for security such as Firewalls and securing linux
nickf
Posts: 2
Joined: 2015/12/15 12:27:39

CVE/OVAL Support

Postby nickf » 2015/12/15 12:31:53

Hi Everyone,
I was noticing CentOS was not longer releasing CVE OVAL information. It looks like it used to go to oval.mitre.org but since the transition to oval.cisecurity.org there have been no more updates to that. Does anyone have any information on why that might be?
Thanks,
Nick

User avatar
avij
Forum Moderator
Posts: 2088
Joined: 2010/12/01 19:25:52
Location: Helsinki, Finland
Contact:

Re: CVE/OVAL Support

Postby avij » 2015/12/15 15:16:25

As far as I know, nothing has been changed regarding this. Where did you see the information that is now missing? All the information that is provided are the CVE IDs in package changelogs. This has been the case since as far as I can remember.

nickf
Posts: 2
Joined: 2015/12/15 12:27:39

Re: CVE/OVAL Support

Postby nickf » 2015/12/15 15:36:22

The CIS OVAL site (or mitre) doesn't have information on any CVE for centos6 past CVE-2015-3456 (released 2015-06-02). The redhat OVAL site has up to CVE-2015-8548 (released 2015-12-14). Any idea who/what was updating the centos OVAL CVEs previously and/or why it stopped? Is there potentially anywhere else to get this information?