On Sun, Mar 06, 2016 at 03:33:16PM +1100, Brian May wrote: > Hello, > > Just wondering if there is some other way we can track security issues > for when CVEs are not available. > > Thinking of imagemagick here, it has a lot of security issues, and > requests for CVEs are not getting any responses. > > For example, if there are no CVEs are we able to use OVEs instead? What abaout DWF? https://distributedweaknessfiling.org/ Kurt