Re: tracking security issues without CVEs

2016-03-22 Thread Paul Wise
On Tue, Mar 22, 2016 at 10:06 PM, Antoine Beaupré wrote: > Well, the friction is one thing, but we need to adopt *one* system for > the future, if CVEs are going the wayside (or even as a complementary > approach). I agree with this post from oss-security: https://marc.info/?l=oss-security&m=145

Re: tracking security issues without CVEs

2016-03-22 Thread Antoine Beaupré
On 2016-03-13 08:53:38, Paul Wise wrote: > On Sat, Mar 12, 2016 at 10:51 PM, Kurt Roeckx wrote: >> On Sun, Mar 06, 2016 at 03:33:16PM +1100, Brian May wrote: >>> For example, if there are no CVEs are we able to use OVEs instead? >> >> What abaout DWF? > > That didn't exist at the time of Brian's po