[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: CVE Information Sources & Scope



On Tue, 4 Oct 2011, Adam Shostack wrote:

> ?  Solaris  (Isn't Solaris now part of Oracle, a CNA?)

Yes, though it seems that Solaris issues are covered both in Oracle CPUs 
(sometimes), and a separate blog which includes multiple-OS issues that 
aren't covered in the CPUs (usually the blog-announced ones are just added 
to existing CVEs, but we might only see them through "patch-oriented" VDBs 
like Secunia.)

- Steve


Page Last Updated or Reviewed: November 06, 2012