Hints for working with CVEs?

[Jason L Tibbitts III]

>>>>> "JB" == Josh Bressers <bressers at redhat.com> writes:

JB> Nothing officially exists to do this.  I've been meaning to write
JB> one for quite some time.  NIST has something similar to what
JB> you're looking for here: http://nvd.nist.gov/

The small http://nvd.nist.gov/download/nvdcve-recent.xml file looks
reasonable; it's small, goes back a week or so, and should be easy to
parse.  Unfortunately I've not done XML parsing before so it would
take me a bit of time ti figure something out.

JB> This is correct, yes.

Thanks; I checked it in.  Is there any particular format used for the
cvs commit log?

 - J<