Re: pulling in other vulnerability databases

To: debian-security-tracker@lists.debian.org, team@security.debian.org, debian-lts@lists.debian.org
Subject: Re: pulling in other vulnerability databases
From: Moritz Mühlenhoff <jmm@inutil.org>
Date: Thu, 25 Jan 2018 13:06:03 +0100
Message-id: <[🔎] 20180125120603.GA6767@pisco.westfalen.local>
In-reply-to: <[🔎] 20180125084146.rq4p6riis4eru4g6@lorien.valinor.li>
References: <[🔎] 878tct3kyi.fsf@curie.anarc.at> <[🔎] CAKTje6H3gAfXQzC9vDFC855t=UT=n3jYwovcZ775ONnB9D90jg@mail.gmail.com> <[🔎] 87607rch9y.fsf@curie.anarc.at> <[🔎] CAKTje6G=++PLmTzaJ0FPMQdSJ9QdxB5+7GqMaZmM5aQ9jeLUeA@mail.gmail.com> <[🔎] 20180125084146.rq4p6riis4eru4g6@lorien.valinor.li>

On Thu, Jan 25, 2018 at 09:41:46AM +0100, Salvatore Bonaccorso wrote:
> I'm actually not super-excited if non-MITRE feeds are automatically
> merged. MITRE CVE database is our master-reference.

Yeah, let's not do that.

Cheers,
        Moritz

Reply to:

References:
- jquery CVEs: no-dsa or unsupported? + snyk.io
  - From: Antoine Beaupré <anarcat@orangeseeds.org>
- Re: jquery CVEs: no-dsa or unsupported? + snyk.io
  - From: Paul Wise <pabs@debian.org>
- pulling in other vulnerability databases
  - From: Antoine Beaupré <anarcat@orangeseeds.org>
- Re: pulling in other vulnerability databases
  - From: Paul Wise <pabs@debian.org>
- Re: pulling in other vulnerability databases
  - From: Salvatore Bonaccorso <carnil@debian.org>

Prev by Date: Re: pulling in other vulnerability databases
Next by Date: Re: pulling in other vulnerability databases
Previous by thread: Re: pulling in other vulnerability databases
Next by thread: Re: pulling in other vulnerability databases
Index(es):
- Date
- Thread