On 12/18/2017 08:56 PM, Salvatore Bonaccorso wrote: > I enabled a slight variant of your proposal.
Thanks. >> * link to SUSE CVE pages > > I have a question here: Red Hat has similar pages, but I have noticed > that sometimes the CVE pages lack behind to the actual Bugzilla > entries. Is the SUSE one always in sync? The CVE pages will show up as soon as we open a public bug, add a CVE specific note, or release an update referencing the CVE. If the bug was originally embargoed, only the latter. The lag should be 1-2 hours, whenever the generating script runs. But what may have tripped you up is that not every CVE will be used as a bug alias in a 1:1 mapping. Looks good as it is now. Andreas -- Andreas Stieger <astie...@suse.com> Project Manager Security SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg)