[
Date Prev
][
Date Next
][
Thread Prev
][
Thread Next
][
Date Index
][
Thread Index
]
Re: CVE Information Sources & Scope
On Tue, 4 Oct 2011, Adam Shostack wrote:
> ? Solaris (Isn't Solaris now part of Oracle, a CNA?)
Yes, though it seems that Solaris issues are covered both in Oracle CPUs
(sometimes), and a separate blog which includes multiple-OS issues that
aren't covered in the CPUs (usually the blog-announced ones are just added
to existing CVEs, but we might only see them through "patch-oriented" VDBs
like Secunia.)
- Steve
