[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

CVSSv2 → CVSSv3?

From: Daniel Shahaf <danielsh_at_apache.org>
Date: Wed, 4 Jan 2017 12:59:13 +0000

We currently publish CVSSv2 scores for scoring security advisories.

Since we started using CVSSv2, a revised standard, CVSSv3, has been
released.

Should we migrate to CVSSv3? I.e., start computing CVSSv3 scores for
security advisories? 

---
Andreas reports distros downstream are migrating to CVSSv3 and would
rather upstreams did, too.
I don't have an opinion on this; I'm not familiar with the new standard.
Cheers,
Daniel
Received on 2017-01-04 14:02:57 CET

This is an archived mail posted to the Subversion Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.