[OASIS Issue Tracker] (CSAF-35) CSAF 2.0 Product Representation

[OASIS Issues Tracker <workgroup_mailer@lists.oasis-open.org>]

     [ https://issues.oasis-open.org/browse/CSAF-35?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Omar Santos updated CSAF-35:
----------------------------
    Issue Type: New Feature  (was: Bug)

> CSAF 2.0 Product Representation
> -------------------------------
>
>                 Key: CSAF-35
>                 URL: https://issues.oasis-open.org/browse/CSAF-35
>             Project: OASIS Common Security Advisory Framework (CSAF) TC
>          Issue Type: New Feature
>          Components: CSAF_CVRF
>    Affects Versions: CSAF 2.0
>            Reporter: Omar Santos
>            Priority: Major
>              Labels: Extension
>
> * Discussed Eric’s email [https://lists.oasis-open.org/archives/csaf/201805/msg00027.html]
>  * Reviewed proposal for product representation.
>  * Allan suggested and presented how STIX addresses products, as follows: [https://docs.google.com/document/d/1epBSNorAYmBVfFnIKNgDzPSXLapL13Jmsmw-WsVfUoY/edit#heading=h.7rkyhtkdthok]
>  * Allan suggested alignment with STIX and standard ways of representing “products” (software and hardware).
>  * Eric agrees about alignment (data model vs. exact syntax).
> This issue is to track the work around product representation in CSAF 2.0



--
This message was sent by Atlassian JIRA
(v7.7.2#77003)