Personal Website of Yakov Shafranovich

« IAB Rejects SPF Appeal         When Blacklisting Goes Bad »

Tracking security advisories for specific products via RSS

A recent problem that I have been having is the need to constantly monitor security advisories for the software I use on this site, my personal computers and the servers at work. So far I have been doing that by reading CERT’s twice-a-month Security Bulletins and SANS’s twice-a-week RISK newsletters. But the problem is that they are way too broad – 99% of the software I use is not even on that list. Instead, what I need is are feeds for specific products.

I did some digging around, and while many products provide security feeds at the same time many only have the general news feeds. So instead, I put together a small hack called ‘cve2rss’ – an RSS interface to the CVE database maintained by MITRE. That database issues numbers to almost all released vulnerabilities and has rather nice keyword search. Here is a sample showing all vulnerabilities for Opera:

http://www.shaftek.org/code/cve2rss/cve2rss.pl?keyword=opera

You can also use the form below to subscribe. The full source code should be available shortly.

Tags: cve, cve2rss, rss, security —

Permalink | Trackback URL | This post has