CVE list needs some triaging features

[William Grant]

The CVE list (completely hidden away at https://launchpad.net/bugs/cve) is a good start, but it needs some kind of triaging feature to make it useful. At the moment, an external CVE tracker is being maintained, but it would be nicer to track the status in each release, among other things, in Malone.

Features such as an easy way to mark each as `Not for us', link to a package, automatically create a bug (oh look, that's 2.5-year-old bug #1708. I'm sooo encouraged), work out upstream tasks (yay, slightly older bug #1707), and a configurable blacklist (like ubuntu-cve has, to automatically disregard CVEs referencing ActiveX, Internet Explorer, etc.) would make this feature actually vaguely usable.

[Robert Collins (lifeless)]

I'm not sure symptom to pick here for this bug to really be about ;)