January 5, 2022 7:20:46 AM CET Paul Wise <p...@debian.org> wrote:

> Please send a patch, issue or mail about that separately.

Please see below:


The security tracker is listing incorrect NVD severity ratings. It looks like 
NVD tends to assign "medium" severity and later upgrades them, while Debian 
doesn't.

For example, see

https://security-tracker.debian.org/tracker/CVE-2021-30579
https://security-tracker.debian.org/tracker/CVE-2021-37973

that show "medium" severity, but are actually rated "critical" and "high" by 
NVD.

-- 
Sent with https://mailfence.com  
Secure and private email

Reply via email to