Re: When to close CVE's

[Siddhesh Poyarekar]

On Fri, Jan 20, 2023 at 8:54 AM Richard Shaw <hobbes1069(a)gmail.com&gt; wrote:
>  So is it when a build is complete in Rawhide? Or must *ALL* active releases get the
> "fix"?
>  
It depends on the severity of the CVE.  For High severity ones it
makes sense to fix in all active releases, less so for Medium/Low
CVEs.

hth

Sid