[ubuntu-hardened] Usage of Ubuntu Security Data in VulnerableCode

Tushar Goel tushar.goel.dav at gmail.com
Wed Jan 11 12:57:38 UTC 2023


Hey,

We would like to integrate the Ubuntu usn data[1][2] and
Ubuntu security data (OVAL format)[3] in vulnerablecode[4]
which is a FOSS db of FOSS vulnerability data. We were not
able to know under which license this security data comes.
We would be grateful to have your acknowledgement over usage of
the ubuntu security data in vulnerablecode and have
some kind of licensing declaration from your side.

[1] - https://usn.ubuntu.com/usn-db/database-all.json.bz2
[2] - https://github.com/nexB/vulnerablecode/pull/1049/
[3] - ttps://people.canonical.com/~ubuntu-security/oval
[4] - https://github.com/nexB/vulnerablecode

Regards,



More information about the ubuntu-hardened mailing list