[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

CVSSv2 → CVSSv3?

From: Daniel Shahaf <danielsh_at_apache.org>
Date: Wed, 4 Jan 2017 12:59:13 +0000

We currently publish CVSSv2 scores for scoring security advisories.

Since we started using CVSSv2, a revised standard, CVSSv3, has been

Should we migrate to CVSSv3? I.e., start computing CVSSv3 scores for
security advisories?

Andreas reports distros downstream are migrating to CVSSv3 and would
rather upstreams did, too.
I don't have an opinion on this; I'm not familiar with the new standard.
Received on 2017-01-04 14:02:57 CET

This is an archived mail posted to the Subversion Dev mailing list.