Re: replacing misleading debian.org/security claims

[Salvatore Bonaccorso <carnil@debian.org>]

Hi,

On Wed, Jan 05, 2022 at 02:20:46PM +0800, Paul Wise wrote:
> > (Side note: It seems that NVD tends to assign "medium" severity to
> > vulnerabilities initially, but upgrades them to "high" or "critical"
> > later. However, Debian keeps showing the initial severity rating)
> 
> Please send a patch, issue or mail about that separately.

We are going to stop anyway at some point displaying the NVD severity,
for context see #992115.

Regards,
Salvatore