• Re: Fwd: CVE-2023-38545 security fix not listed on NVD databse

    From =?UTF-8?Q?Moritz_M=C3=BChlenhoff?=@21:1/5 to Amar Adadande on Fri Feb 2 20:10:01 2024
    Amar Adadande wrote:
    As part of our organization's security measures, we regularly conduct security scans using the National Vulnerability Database (NVD). We have noticed that the NVD database used by Debian may not be up to date with the latest vulnerabilities.

    You seem to be mistaken. We don't use the NVD database for anything and
    triage vulnerabilities ourselves.

    If any external provider (like apparently the security feed you seem to
    be using) uses incorrect/stale data which differs from what we publish
    via the Debian Security Tracker you should report this disprepancy to
    them, not us.

    If you believe to have found incorrect, please see here: https://security-tracker.debian.org/tracker/data/report

    Cheers,
    Moritz

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)