subversion-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Daniel Shahaf <danie...@apache.org>
Subject CVSSv2 → CVSSv3?
Date Wed, 04 Jan 2017 12:59:13 GMT
We currently publish CVSSv2 scores for scoring security advisories.

Since we started using CVSSv2, a revised standard, CVSSv3, has been
released.

Should we migrate to CVSSv3?  I.e., start computing CVSSv3 scores for
security advisories?

---

Andreas reports distros downstream are migrating to CVSSv3 and would
rather upstreams did, too.

I don't have an opinion on this; I'm not familiar with the new standard.

Cheers,

Daniel

Mime
View raw message