CVE/OVAL Support

Support for security such as Firewalls and securing linux
Post Reply
nickf
Posts: 2
Joined: 2015/12/15 12:27:39

CVE/OVAL Support

Post by nickf » 2015/12/15 12:31:53

Hi Everyone,
I was noticing CentOS was not longer releasing CVE OVAL information. It looks like it used to go to oval.mitre.org but since the transition to oval.cisecurity.org there have been no more updates to that. Does anyone have any information on why that might be?
Thanks,
Nick

User avatar
avij
Retired Moderator
Posts: 3046
Joined: 2010/12/01 19:25:52
Location: Helsinki, Finland
Contact:

Re: CVE/OVAL Support

Post by avij » 2015/12/15 15:16:25

As far as I know, nothing has been changed regarding this. Where did you see the information that is now missing? All the information that is provided are the CVE IDs in package changelogs. This has been the case since as far as I can remember.

nickf
Posts: 2
Joined: 2015/12/15 12:27:39

Re: CVE/OVAL Support

Post by nickf » 2015/12/15 15:36:22

The CIS OVAL site (or mitre) doesn't have information on any CVE for centos6 past CVE-2015-3456 (released 2015-06-02). The redhat OVAL site has up to CVE-2015-8548 (released 2015-12-14). Any idea who/what was updating the centos OVAL CVEs previously and/or why it stopped? Is there potentially anywhere else to get this information?

Post Reply