Re: CVE for Kali Linux

[Jeremy Stanley <jeremy () openstack org>]

On 2015-03-22 09:49:12 -0600 (-0600), Kurt Seifried wrote:
[...]
> downloads of updates via HTTP with no other protection == CVE

And in this case the updates are signed by a key trusted by a
keyring baked into the OS, so given the presence of "other
protection" sounds like no CVE needed?
-- 
Jeremy Stanley