CVSSv2 → CVSSv3?
From: Daniel Shahaf <danielsh_at_apache.org>
Date: Wed, 4 Jan 2017 12:59:13 +0000
We currently publish CVSSv2 scores for scoring security advisories.
Since we started using CVSSv2, a revised standard, CVSSv3, has been
Should we migrate to CVSSv3? I.e., start computing CVSSv3 scores for
--- Andreas reports distros downstream are migrating to CVSSv3 and would rather upstreams did, too. I don't have an opinion on this; I'm not familiar with the new standard. Cheers, DanielReceived on 2017-01-04 14:02:57 CET
This is an archived mail posted to the Subversion Dev mailing list.