Re: CVEs and Oracle products

  • From: "Job Miller" <dmarc-noreply@xxxxxxxxxxxxx> (Redacted sender "jobmiller@xxxxxxxxx" for DMARC)
  • To: "patrice.boivin@xxxxxxxxx" <patrice.boivin@xxxxxxxxx>, ORACLE-L <oracle-l@xxxxxxxxxxxxx>
  • Date: Fri, 6 Jun 2014 10:25:38 -0700 (PDT)

you looking for something like this?

Mapping of CAN and CVE numbers to Advisory and Alert

 
 Mapping of CAN and CVE numbers to Advisory and Alert
Mapping of CAN and CVE numbers to Advisory and Alert  
View on www.oracle.com Preview by Yahoo  

The CPU patches the mapping links to have tables that map the product to the 
CVE also.


http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixDB


________________________________
 From: Patrice sur GMail <patrice.boivin@xxxxxxxxx>
To: ORACLE-L <oracle-l@xxxxxxxxxxxxx> 
Sent: Friday, June 6, 2014 12:46 PM
Subject: Re: CVEs and Oracle products
 


I also know about mitre.org... e.g. 
http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=oracle and NIST... e.g. for the 
OpenSSL CVE: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0224

But it refers to openSSL, not to the products running OpenSSL...  can't quickly 
tell if any Oracle products are affected.

Other related posts: