Re: Linux kernel CVEs not mentioned on oss-security

[Simon McVittie <smcv () debian org>]

On Mon, 25 Sep 2017 at 21:50:59 +0000, Priedhorsky, Reid wrote:
> 2. Is there another source of comprehensive coverage of vulnerabilities
> in the Linux kernel, including but not necessarily limited to all CVEs
> issued for it?

https://security-tracker.debian.org/tracker/source-package/linux is
probably not comprehensive either, but should include all the
non-embargoed CVEs and other vulnerabilities that the Debian security team
is aware of, including vulnerabilities that were assessed as too minor
to justify a Debian security advisory.

(The same works for any other Debian source package, e.g.
https://security-tracker.debian.org/tracker/source-package/ioquake3 is
a less extreme case.)

Regards,
    smcv