Re: [yocto] CVE list vs bugzilla

2015-05-18 Thread Whiteman, John L
[mailto:yocto-boun...@yoctoproject.org] On Behalf Of Sona Sarmadi Sent: Tuesday, May 05, 2015 8:12 AM To: yocto-secur...@yoctoproject.org Cc: 'yocto@yoctoproject.org'; 'openembedded-c...@lists.openembedded.org' Subject: Re: [yocto] CVE list vs bugzilla Trying with correct email address :) Hi all

Re: [yocto] CVE list vs bugzilla

2015-05-05 Thread Sona Sarmadi
Trying with correct email address :) Hi all, To monitor/scan vulnerabilities (CVE), check affected packages, versions, branches, fixed versions/branches etc ... we need either to file a bug in bugzilla for each publically disclosed CVE or have a simple data base. Today, we sometimes file a