Re: Debian CVEs for jessie and wheezy

[Moritz Mühlenhoff <jmm@inutil.org>]

On Tue, Jul 21, 2020 at 06:25:20PM +0530, Vijay Kumar Kamannavar wrote:
> Hello,
> 
> I see recently the vulnerabilities related to jessie are removed from the
> source https://security-tracker.debian.org/tracker/data/json.
> and also i dont see vulnerabilities related to wheezy in the same source.
> 
> I think Jessie reached EOL,may be thats the reason the open/fixed
> vulnerabilities information related to jessie is removed from the source
> https://security-tracker.debian.org/tracker/data/json.
> 
> I have a question, from where can I get the information of open & fixed
> cves for Jessie and Wheezy ? Do we have another source?
> I see one source
> https://salsa.debian.org/security-tracker-team/security-tracker/-/blob/master/data/CVE/list
> but
> this source is not clean and not easy to parse compared to
> https://security-tracker.debian.org/tracker/data/json

These are no longer supported and as such there's no further JSON feed,
if you need this, you'll need to parse data/CVE/list yourself.

Cheers,
        Moritz