intelmq icon indicating copy to clipboard operation
intelmq copied to clipboard

Implement IEP009 - product & vuln. identification

Open kamil-certat opened this issue 9 months ago • 1 comments

The related IEP has already been discussed and open for more than a year.

Compatibility: as no bot uses the field by default at the moment, there is no incompatibility risk if the local operator uses modified IDF schema or stores all data in e.g. SQL database. To prevent issues, until the next major release the official bots using the field should fall back to extra.<field name> if the field does not exist in the local IDF.

IEP: https://github.com/certtools/ieps/tree/main/009 Related discussion: https://lists.cert.at/mailman3/hyperkitty/list/[email protected]/thread/CHOJSDCZUAYIHWHF35WUODL3WVW3JDP6/#PKXIAE6DQRX5XQW4NNXUS4WJAYNMPW52

kamil-certat avatar Mar 03 '25 14:03 kamil-certat

Upgrade function in intelmq/lib/upgrades to update the harmonization.conf is missing too

sebix avatar Mar 07 '25 08:03 sebix

I already did a review on Apr 14

sebix avatar Aug 25 '25 13:08 sebix