Fedora and External Product Vulnerabilities (Bugzilla #185499, RHSA-2006-0268 (Macromedia Flash))

Wed Apr 5 01:46:35 UTC 2006

On Tue, 2006-04-04 at 21:44 -0400, Luke Macken wrote:
> On Mon, Apr 03, 2006 at 09:46:30PM -0700, Karsten Wade wrote:
> > It might be cool if we could get security announcements to all magically
> > appear on a page ... or in a searchable database ... and that would
> > cover us for everything in Core and Extras thoroughly.  We could link to
> > external lists of non-FC/FE vulnerabilities for packages in third-party
> > repos.
> 
> Doing this would essentially much make Fedora CVE compatible[0] (aside
> from some minor documentation).  Is this something we would even want to
> pursue?

Yes. It would be have the notification mechanisms include these
information in the future too.

Rahul