[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20080405121458.GC25641@openwall.com>
Date: Sat, 5 Apr 2008 16:14:58 +0400
From: Solar Designer <solar@...nwall.com>
To: oss-security@...ts.openwall.com
Subject: Re: wiki: vendor info & osvdb.org/vendors
On Fri, Apr 04, 2008 at 07:06:36PM -0400, Josh Bressers wrote:
> > http://osvdb.org/vendors
>
> Holy Smokes that's impressive!
>
> I don't think there's anything to consolidate, I think we just need to
> ensure everything on the oss-security wiki page is in your data (I would be
> surprised if it's not), then we just point at that. The page about easily
> finding patches is probably still relevant, but there's no sense in
> duplicating information, especially when there is such an extensive source
> as this.
I am not so sure. On our wiki, we have a separation between distro
vendors and individual Open Source projects - and I like it. I haven't
found a way to extract a list of distro vendors only from osvdb.org.
Also, some vendors and projects may have relevant info that just does
not fit into pre-defined fields on osvdb.org - yet it may be specified
in entries on the wiki.
It is a good idea to update the info at osvdb.org with whatever we have.
For example, I was not able to find rPath in the osvdb.org database.
Then the vendors/projects themselves would need to remember to keep
those entries up to date as well...
Also, we should definitely link to osvdb.org.
Alexander
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
