[OVAL REPOSITORY] Pending Changes to CIS OVAL Web Site

Adam Montville Adam.Montville at cisecurity.org
Tue Feb 20 09:21:43 EST 2018


After sending out this note, we have received no objections to no longer building OVAL content expressed in formats older than 5.10. Consequently, CIS will be working to update the oval.cisecurity.org site as detailed below over the next couple of weeks.

Kind regards,


From: Adam Montville <Adam.Montville at cisecurity.org>
Date: Monday, February 5, 2018 at 7:39 AM
To: "oval_repository at lists.cisecurity.org" <oval_repository at lists.cisecurity.org>
Subject: Pending Changes to CIS OVAL Web Site


Over the past few months we have been tracking analytics on https://oval.cisecurity.org to ascertain which static download bundles are the most popular, and which are in the least demand. It is clear that static content expressed using OVAL version 5.8 and below is in far less demand than content expressed using OVAL 5.10 and above.

After presenting this information to the OVAL Board during the first quarter board meeting, we have concluded that we can remove static content expressed using OVAL version 5.8 and below from https://oval.cisecurity.org without adversely impacting a significant number of repository users.

What will this change entail?

1.      The only OVAL versions available from the Bundle Downloads page (https://oval.cisecurity.org/repository/download) will be 5.11.2, 5.11.1, and 5.10

2.      A link to the help page will be added to the Bundle Downloads page, along with a direct link to the actual repository in GitHub

3.      We will be opportunistically updating the look and feel of the site to match other CIS sites

Where will you be able to get content expressed in older OVAL versions?

·         As identified in (2) above, you will be able to use the GitHub repository directly to build the OVAL content specifically for your needs.

As a repository user, we would like to hear from you if you feel this change will adversely impact your operations. Please provide your comments/feedback no later than midnight Eastern time on February 16, 2018.

Kind regards,

This message and attachments may contain confidential information. If it appears that this message was sent to you by mistake, any retention, dissemination, distribution or copying of this message and attachments is strictly prohibited. Please notify the sender immediately and permanently delete the message and any attachments.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cisecurity.org/pipermail/oval_repository_lists.cisecurity.org/attachments/20180220/f42d2c0d/attachment-0002.html>

More information about the OVAL_Repository mailing list