Launchpad itself

  1. Bug #119361
  2. Comment #2

Comment 2 for bug 119361

Revision history for this message
Kees Cook (kees) wrote : Re: CVE links should use CVE-YYYY-NNNN format

Correct. As far as I know:

- "Link to CVE" page needs to take full CVE name, including "CVE-" prefix
- "CVE Reference" box for bugs that have linked CVEs
- CVE page needs missing dash between "CVE" and index number (e.g. lhttps://bugs.launchpad.net/bugs/cve/2007-2951)
- CVE url paths should be valid with cve prefix too (e.g. https://LP.../bugs/cve/cve-2007-2951

Really just making the index be "CVE-YYYY-NNNN" instead of "YYYY-NNNNN" should do the trick in most cases.