{"id":24995,"date":"2021-06-25T06:21:37","date_gmt":"2021-06-25T06:21:37","guid":{"rendered":"https:\/\/rbsitsoftwaresolution.com\/blog\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html"},"modified":"2021-06-25T06:21:37","modified_gmt":"2021-06-25T06:21:37","slug":"google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software","status":"publish","type":"post","link":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html","title":{"rendered":"Google rolls out a unified security vulnerability schema for open-source software"},"content":{"rendered":"<p>Business author and expert, H. James Harrington, once said, &#8220;If you can&#8217;t measure something, you can&#8217;t understand it. If you can&#8217;t understand it, you can&#8217;t control it. If you can&#8217;t control it, you can&#8217;t improve it.&#8221; He was right. And Google is following this advice by introducing a new way to strengthen open-source security by introducing a <a href=\"javascript:void(0)\">vulnerability interchange schema<\/a> for describing vulnerabilities across open-source ecosystems.<\/p>\n<p>That&#8217;s very important. One low-level problem is that there are many security vulnerability databases, there&#8217;s no standard interchange format. If you want to aggregate information from multiple databases you must handle each one completely separately. That&#8217;s a real waste of time and energy. At the very least you must create parsers for each database format to merge their data. All this makes systematic tracking of dependencies and collaboration between vulnerability databases much harder than it should be.\u00a0<\/p>\n<p>So, Google built on the work it&#8217;s already done on the <a href=\"javascript:void(0)\">Open Source Vulnerabilities (OSV) database<\/a> and the <a href=\"javascript:void(0)\">OSS-Fuzz<\/a> dataset of security vulnerabilities. The Google Open Source Security team, Go team, and the broader open-source community all helped create this simple vulnerability interchange schema. While working on the schema, they could communicate precise vulnerability data for hundreds of critical open-source projects.\u00a0<\/p>\n<p>Now the OSV and the schema has been expanded to several new key open-source ecosystems:\u00a0<a href=\"javascript:void(0)\">Go<\/a>,<a href=\"javascript:void(0)\"> Rust<\/a>,<a href=\"javascript:void(0)\"> Python<\/a>, and<a href=\"javascript:void(0)\"> DWF<\/a>. This expansion unites and aggregates their vulnerability databases. This gives developers a better way to track and remediate their security issues.\u00a0<\/p>\n<p>This new vulnerability schema aims to address some key problems with managing open-source vulnerabilities. It:\u00a0<\/p>\n<ul>\n<li>Enforces version specification that precisely matches naming and versioning schemes used in actual open-source package ecosystems. For instance, matching a vulnerability such as a\u00a0<a href=\"javascript:void(0)\">CVE<\/a> to a package name and set of versions in a package manager is difficult to do in an automated way using existing mechanisms such as\u00a0<a href=\"javascript:void(0)\">CPEs<\/a>.\u00a0<\/li>\n<\/ul>\n<ul>\n<li>Can describe vulnerabilities in any open source ecosystem, while not requiring ecosystem-dependent logic to process them.\u00a0<\/li>\n<\/ul>\n<ul>\n<li>Is easy to use by both automated systems and humans.<\/li>\n<\/ul>\n<p>In short, as Abhishek Arya, the Google Open Source Security Team Manager, put in a note on the specification manuscript, &#8220;The intent is to create a simple schema format that contains precise vulnerability metadata, the necessary details needed to fix the bug and is a low burden on the resource-constrained open source ecosystem.&#8221;<\/p>\n<p>The hope is that with this schema, developers can define a format that all vulnerability databases can export. Such a unified format would mean that programmers and security researchers can easily share tooling and vulnerability data across all open-source projects.\u00a0<\/p>\n<section class=\"sharethrough-top\" data-component=\"medusaContentRecommendation\" data-medusa-content-recommendation-options=\"{promo:promo_zd_recommendation_sharethrough_top_in_article_desktop,spot:dfp-in-article}\">\n<\/section>\n<p>The vulnerability schema spec has gone through several iterations, but it&#8217;s not completed yet. Google and friends are inviting further feedback as it gets closer to being finalized. A number of public vulnerability databases today are already exporting this format, with more in the pipeline:<\/p>\n<ul>\n<li>\n<p><a href=\"javascript:void(0)\">Go vulnerability database<\/a> for Go packages<\/p>\n<\/li>\n<li>\n<p><a href=\"javascript:void(0)\">Rust advisory database<\/a> for Cargo packages<\/p>\n<\/li>\n<li>\n<p><a href=\"javascript:void(0)\">Python advisory database<\/a> for PyPI packages<\/p>\n<\/li>\n<li>\n<p><a href=\"javascript:void(0)\">DWF database<\/a> for vulnerabilities in the Linux kernel and other popular software\u00a0<\/p>\n<\/li>\n<li>\n<p><a href=\"javascript:void(0)\">OSS-Fuzz database<\/a> for vulnerabilities in C\/C++ software found by OSS-Fuzz\u00a0<\/p>\n<\/li>\n<\/ul>\n<p>The OSV service has also aggregated all of these vulnerability databases, which are viewable at the project&#8217;s <a href=\"javascript:void(0)\">web UI<\/a>. The databases can also be queried with a single command via its <a href=\"javascript:void(0)\">existing APIs<\/a>.<\/p>\n<p>In addition to<a href=\"javascript:void(0)\"> OSV&#8217;s existing automation<\/a>, Google has built more\u00a0<a href=\"javascript:void(0)\">automation tools<\/a> for vulnerability database maintenance and used these tools to\u00a0<a href=\"javascript:void(0)\">bootstrap<\/a> the community\u00a0<a href=\"javascript:void(0)\">Python advisory database<\/a>. This automation takes existing feeds, accurately matches them to packages, and\u00a0<a href=\"javascript:void(0)\">generates entries<\/a> containing\u00a0<a href=\"javascript:void(0)\">precise, validated version ranges<\/a> with minimal human intervention. Google plans to extend this tooling to other ecosystems for which there is no existing vulnerability database or little support for ongoing database maintenance.<\/p>\n<p>This effort also aligns with the recent\u00a0<a href=\"javascript:void(0)\">US Executive Order on Improving the Nation&#8217;s Cybersecurity<\/a>, which emphasized the need to remove barriers to sharing threat information in order to strengthen national infrastructure. This expanded shared vulnerability database marks an important step toward creating a more secure open-source environment for all users.\u00a0<\/p>\n<p>Want to get involved? You should. This promises to make open-source software, no matter what your project, much easier to secure.\u00a0<\/p>\n<p><strong>Related Stories:<\/strong><\/p>\n<ul>\n<li><a href=\"javascript:void(0)\">Open-source security: Google has a new plan to stop software supply chain attacks<\/a><\/li>\n<li><a href=\"javascript:void(0)\">CloudLinux releases UChecker security tool for Linux servers<\/a><\/li>\n<li><a href=\"javascript:void(0)\">Nasty Linux systemd root level security bug revealed and patched<\/a><\/li>\n<\/ul>\n<p>Article source: https:\/\/www.zdnet.com\/article\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software\/#ftag=RSSbaffb68<\/p>","protected":false},"excerpt":{"rendered":"<p>Business author and expert, H. James Harrington, once said, &#8220;If you can&#8217;t measure something, you can&#8217;t understand it. If you can&#8217;t understand it, you can&#8217;t control it. If you can&#8217;t <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[31],"tags":[34],"class_list":["post-24995","post","type-post","status-publish","format-standard","hentry","category-linux-updates","tag-linux-updates"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"Business author and expert, H. James Harrington, once said, &quot;If you can&#039;t measure something, you can&#039;t understand it. If you can&#039;t understand it, you can&#039;t control it. If you can&#039;t control it, you can&#039;t improve it.&quot; He was right. And Google is following this advice by introducing a new way to strengthen open-source security by\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"R Software Solution\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/www.rbsitsoftwaresolution.in\/blog\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"IT and Latest Technology Updates - R Software Solution | a new innovation\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Google rolls out a unified security vulnerability schema for open-source software IT and Latest Technology Updates - R Software Solution\" \/>\n\t\t<meta property=\"og:description\" content=\"Business author and expert, H. James Harrington, once said, &quot;If you can&#039;t measure something, you can&#039;t understand it. If you can&#039;t understand it, you can&#039;t control it. If you can&#039;t control it, you can&#039;t improve it.&quot; He was right. And Google is following this advice by introducing a new way to strengthen open-source security by\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/www.rbsitsoftwaresolution.in\/blog\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/i0.wp.com\/www.rbsitsoftwaresolution.in\/blog\/wp-content\/uploads\/2019\/01\/logo.png?fit=94%2C59&#038;ssl=1\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/i0.wp.com\/www.rbsitsoftwaresolution.in\/blog\/wp-content\/uploads\/2019\/01\/logo.png?fit=94%2C59&#038;ssl=1\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-06-25T06:21:37+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-06-25T06:21:37+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Google rolls out a unified security vulnerability schema for open-source software IT and Latest Technology Updates - R Software Solution\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Business author and expert, H. James Harrington, once said, &quot;If you can&#039;t measure something, you can&#039;t understand it. If you can&#039;t understand it, you can&#039;t control it. If you can&#039;t control it, you can&#039;t improve it.&quot; He was right. And Google is following this advice by introducing a new way to strengthen open-source security by\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/i0.wp.com\/www.rbsitsoftwaresolution.in\/blog\/wp-content\/uploads\/2019\/01\/logo.png?fit=94%2C59&amp;ssl=1\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html#article\",\"name\":\"Google rolls out a unified security vulnerability schema for open-source software IT and Latest Technology Updates - R Software Solution\",\"headline\":\"Google rolls out a unified security vulnerability schema for open-source software\",\"author\":{\"@id\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/author\\\/admin#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/01\\\/logo.png?fit=94%2C59&ssl=1\",\"@id\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/#articleImage\",\"width\":94,\"height\":59},\"datePublished\":\"2021-06-25T06:21:37+00:00\",\"dateModified\":\"2021-06-25T06:21:37+00:00\",\"inLanguage\":\"en-US\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html#webpage\"},\"articleSection\":\"Linux Updates, Linux Updates\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/category\\\/linux-updates#listItem\",\"name\":\"Linux Updates\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/category\\\/linux-updates#listItem\",\"position\":2,\"name\":\"Linux Updates\",\"item\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/category\\\/linux-updates\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html#listItem\",\"name\":\"Google rolls out a unified security vulnerability schema for open-source software\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html#listItem\",\"position\":3,\"name\":\"Google rolls out a unified security vulnerability schema for open-source software\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/category\\\/linux-updates#listItem\",\"name\":\"Linux Updates\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/#organization\",\"name\":\"IT and Latest Technology Updates - R Software Solution\",\"description\":\"a new innovation\",\"url\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/01\\\/logo.png?fit=94%2C59&ssl=1\",\"@id\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html\\\/#organizationLogo\",\"width\":94,\"height\":59},\"image\":{\"@id\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html\\\/#organizationLogo\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/author\\\/admin#author\",\"url\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/author\\\/admin\",\"name\":\"R Software Solution\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3599de799aedfbc984125925734530ce764a18831ce50eacf4bd35eca6bad4db?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"R Software Solution\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html#webpage\",\"url\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html\",\"name\":\"Google rolls out a unified security vulnerability schema for open-source software IT and Latest Technology Updates - R Software Solution\",\"description\":\"Business author and expert, H. James Harrington, once said, \\\"If you can't measure something, you can't understand it. If you can't understand it, you can't control it. If you can't control it, you can't improve it.\\\" He was right. And Google is following this advice by introducing a new way to strengthen open-source security by\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/author\\\/admin#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/author\\\/admin#author\"},\"datePublished\":\"2021-06-25T06:21:37+00:00\",\"dateModified\":\"2021-06-25T06:21:37+00:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/\",\"name\":\"IT and Latest Technology Updates - R Software Solution\",\"description\":\"a new innovation\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.rbsitsoftwaresolution.in\\\/blog\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"Google rolls out a unified security vulnerability schema for open-source software IT and Latest Technology Updates - R Software Solution","description":"Business author and expert, H. James Harrington, once said, \"If you can't measure something, you can't understand it. If you can't understand it, you can't control it. If you can't control it, you can't improve it.\" He was right. And Google is following this advice by introducing a new way to strengthen open-source security by","canonical_url":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html#article","name":"Google rolls out a unified security vulnerability schema for open-source software IT and Latest Technology Updates - R Software Solution","headline":"Google rolls out a unified security vulnerability schema for open-source software","author":{"@id":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/author\/admin#author"},"publisher":{"@id":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/i0.wp.com\/www.rbsitsoftwaresolution.in\/blog\/wp-content\/uploads\/2019\/01\/logo.png?fit=94%2C59&ssl=1","@id":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/#articleImage","width":94,"height":59},"datePublished":"2021-06-25T06:21:37+00:00","dateModified":"2021-06-25T06:21:37+00:00","inLanguage":"en-US","mainEntityOfPage":{"@id":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html#webpage"},"isPartOf":{"@id":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html#webpage"},"articleSection":"Linux Updates, Linux Updates"},{"@type":"BreadcrumbList","@id":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/#listItem","position":1,"name":"Home","item":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/category\/linux-updates#listItem","name":"Linux Updates"}},{"@type":"ListItem","@id":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/category\/linux-updates#listItem","position":2,"name":"Linux Updates","item":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/category\/linux-updates","nextItem":{"@type":"ListItem","@id":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html#listItem","name":"Google rolls out a unified security vulnerability schema for open-source software"},"previousItem":{"@type":"ListItem","@id":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html#listItem","position":3,"name":"Google rolls out a unified security vulnerability schema for open-source software","previousItem":{"@type":"ListItem","@id":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/category\/linux-updates#listItem","name":"Linux Updates"}}]},{"@type":"Organization","@id":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/#organization","name":"IT and Latest Technology Updates - R Software Solution","description":"a new innovation","url":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/","logo":{"@type":"ImageObject","url":"https:\/\/i0.wp.com\/www.rbsitsoftwaresolution.in\/blog\/wp-content\/uploads\/2019\/01\/logo.png?fit=94%2C59&ssl=1","@id":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html\/#organizationLogo","width":94,"height":59},"image":{"@id":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html\/#organizationLogo"}},{"@type":"Person","@id":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/author\/admin#author","url":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/author\/admin","name":"R Software Solution","image":{"@type":"ImageObject","@id":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/3599de799aedfbc984125925734530ce764a18831ce50eacf4bd35eca6bad4db?s=96&d=mm&r=g","width":96,"height":96,"caption":"R Software Solution"}},{"@type":"WebPage","@id":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html#webpage","url":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html","name":"Google rolls out a unified security vulnerability schema for open-source software IT and Latest Technology Updates - R Software Solution","description":"Business author and expert, H. James Harrington, once said, \"If you can't measure something, you can't understand it. If you can't understand it, you can't control it. If you can't control it, you can't improve it.\" He was right. And Google is following this advice by introducing a new way to strengthen open-source security by","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/#website"},"breadcrumb":{"@id":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html#breadcrumblist"},"author":{"@id":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/author\/admin#author"},"creator":{"@id":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/author\/admin#author"},"datePublished":"2021-06-25T06:21:37+00:00","dateModified":"2021-06-25T06:21:37+00:00"},{"@type":"WebSite","@id":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/#website","url":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/","name":"IT and Latest Technology Updates - R Software Solution","description":"a new innovation","inLanguage":"en-US","publisher":{"@id":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/#organization"}}]},"og:locale":"en_US","og:site_name":"IT and Latest Technology Updates - R Software Solution | a new innovation","og:type":"article","og:title":"Google rolls out a unified security vulnerability schema for open-source software IT and Latest Technology Updates - R Software Solution","og:description":"Business author and expert, H. James Harrington, once said, &quot;If you can't measure something, you can't understand it. If you can't understand it, you can't control it. If you can't control it, you can't improve it.&quot; He was right. And Google is following this advice by introducing a new way to strengthen open-source security by","og:url":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html","og:image":"https:\/\/i0.wp.com\/www.rbsitsoftwaresolution.in\/blog\/wp-content\/uploads\/2019\/01\/logo.png?fit=94%2C59&#038;ssl=1","og:image:secure_url":"https:\/\/i0.wp.com\/www.rbsitsoftwaresolution.in\/blog\/wp-content\/uploads\/2019\/01\/logo.png?fit=94%2C59&#038;ssl=1","article:published_time":"2021-06-25T06:21:37+00:00","article:modified_time":"2021-06-25T06:21:37+00:00","twitter:card":"summary_large_image","twitter:title":"Google rolls out a unified security vulnerability schema for open-source software IT and Latest Technology Updates - R Software Solution","twitter:description":"Business author and expert, H. James Harrington, once said, &quot;If you can't measure something, you can't understand it. If you can't understand it, you can't control it. If you can't control it, you can't improve it.&quot; He was right. And Google is following this advice by introducing a new way to strengthen open-source security by","twitter:image":"https:\/\/i0.wp.com\/www.rbsitsoftwaresolution.in\/blog\/wp-content\/uploads\/2019\/01\/logo.png?fit=94%2C59&ssl=1"},"aioseo_meta_data":{"post_id":"24995","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2023-07-13 16:48:46","updated":"2026-10-25 10:56:14","focus_keyword":null,"additional_keywords":null,"truseo_locale":null,"seo_analyzer_scan_date":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/www.rbsitsoftwaresolution.in\/blog\/\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/www.rbsitsoftwaresolution.in\/blog\/category\/linux-updates\" title=\"Linux Updates\">Linux Updates<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tGoogle rolls out a unified security vulnerability schema for open-source software\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/"},{"label":"Linux Updates","link":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/category\/linux-updates"},{"label":"Google rolls out a unified security vulnerability schema for open-source software","link":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/google-rolls-out-a-unified-security-vulnerability-schema-for-open-source-software.html"}],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p7WU2O-6v9","jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/wp-json\/wp\/v2\/posts\/24995","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/wp-json\/wp\/v2\/comments?post=24995"}],"version-history":[{"count":0,"href":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/wp-json\/wp\/v2\/posts\/24995\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/wp-json\/wp\/v2\/media?parent=24995"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/wp-json\/wp\/v2\/categories?post=24995"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/wp-json\/wp\/v2\/tags?post=24995"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}