Re: Fwd: CVE-2023-38545 security fix not listed on NVD databse
Amar Adadande wrote:
> As part of our organization's security measures, we regularly conduct
> security scans using the National Vulnerability Database (NVD). We have
> noticed that the NVD database used by Debian may not be up to date with the
> latest vulnerabilities.
You seem to be mistaken. We don't use the NVD database for anything and
triage vulnerabilities ourselves.
If any external provider (like apparently the security feed you seem to
be using) uses incorrect/stale data which differs from what we publish
via the Debian Security Tracker you should report this disprepancy to
them, not us.
If you believe to have found incorrect, please see here:
https://security-tracker.debian.org/tracker/data/report
Cheers,
Moritz
Reply to: