Just to give a bit of context:
One of the problem publishing severities as-is is looking less secure
while actually not true.
For example publishing docker images to quay.io for several distribution
will make debian look worse than others.
| Tag | Last Modifie
Package: security-tracker
Severity: normal
We should stop using/displaying the NVD severity in the Security Tracker. Anyone
is free to look up whatever external data source they want, but we should not
give NVD legitimacy by showing in the Security Tracker.
2 matches
Mail list logo
