Based on the discussions over the past week, Neal and I are in
agreement about the addition of an update component and a language
component to the structure of a CPE Name. The new format looks like:
cpe:/part:vendor:product:version:update:edition:language
Our hope is that this accurately reflects the opinions expressed by the
community. The main reason for this change is to separate information
that may be needed by the prefix property. Previously we would have
put update information inside the version component and language
information inside the edition component. Although this would still
create unique names, matching around this information would be broken.
We do realize that matching still does not always work, but these
additional field should provide a better balance between verboseness
and simplicity.
Please voice any concerns about this decision if you have them.
We also realize that this change will break a lot of names that people
have been working on. For this we are sorry and hope that the
advantages of the change make the added work worth while. This change
does represent the last item on our to-do list with regards to CPE
Names. I think everything is now set.
I will be updating the draft CPE Specification and will have the new
draft out tomorrow. We still have to finish the matching section and
hope to have this done by Monday at which time we will stamp the draft
done and put out a release candidate. We are still on track for an
official release of CPE 2.0 on Friday September 14th.
Work is also progressing on the CPE Dictionary. We hope to have a set
of validated names ready of Monday. This set will be expanded over the
next two weeks and will become official with the spec on the 14th.
Thanks again for everyone's help and patience as we work to finalize
this update of CPE.
Thanks
Drew
---------
Andrew Buttner
The MITRE Corporation
[hidden email]
781-271-3515
