Official Release of CPE 2.1

1 message Options
Embed this post
Permalink
Andrew Buttner

Official Release of CPE 2.1

Reply Threaded More More options
Print post
Permalink
I am pleased to announce the official release of CPE 2.1.  The
specification is available on the CPE Wed Site at:

http://cpe.mitre.org/files/cpe-specification_2.1.pdf

This release fixed the follow:

- added Reporting use case
- clarified how to handle the Vendor Component when multiple DNS names
are registered
- clarified how to determine the Product Component (used most common
recognizable name)
- fixed Microsoft Windows examples
- fixed bug in "namePattern" in schemas
- allowed multiple "title" elements in dictionary schema
- clarified how CPE Names relate to external entities
- modified the use of the shemaLocation tag in the two schemas
- added an <xsd:any> tag to the end of the <cpe-item> in the CPE
Dictionary schema
- changed the processContents attribute of the xsd:any
tags to "lax"
- added an optional <generator> element to hold timestamp info in the
CPE Dictionary schema
- clarified the use of percent-encoding in the URI representation of a
CPE Name

An updated CPE Dictionary is also ready to be pushed and should be up
on the web site shortly.

Thanks
Drew

---------

Andrew Buttner
The MITRE Corporation
[hidden email]
781-271-3515