Source of the Notes of CVE id

["P T, Sarath" <Sarath_PT@mentor.com>]

Hi Team,

 

Could you please guide me regarding how we are making the notes of a particular CVE under debian-security tracker ? like how we are making a CVE as “minor” or “major” etc. under the notes session. For your information I am giving a link of a CVE : https://security-tracker.debian.org/tracker/CVE-2016-1585 and I wanted to know how the below information came from.

[bullseye] - apparmor <ignored> (Minor overall security impact)
[buster] - apparmor <ignored> (Minor overall security impact)
[stretch] - apparmor <ignored> (Minor overall security impact)
[jessie] - apparmor <ignored> (Minor overall security impact)

 

 

Hope you can clear my query soon.

 

Regards
Sarath P T