Blueprints that have vulnerabilities with a CVSS score >= 9.0 and meet the following criteria should submit their information in the chart below to have the vulnerability considered for an exception:
- Running at least the minimum OS version required by the Akraino Security Sub-Committee
- Ubuntu
- CentOS
- Debian
- Fedora
- Suse Enterprise Server
| CVE # | Blueprint | Blueprint OS/Ver | URL Showing OS Patch Not Available | Contact Name | Contact Email | Comment |
|---|---|---|---|---|---|---|
| CVE-2019-12900 | Connected Vehicle Blueprint (CVB) | Centos 7.8 | https://access.redhat.com/security/cve/CVE-2019-12900 | Abhimanyu | abhimanyu@parserlabs.com | We need exception request for this CVE as it is not yet fixed for 7.X version |
| CVE-2019-12900 | IEC Type4-AR/VVR oriented Edge Stack | Centos 7.8 | https://access.redhat.com/security/cve/CVE-2019-12900 | Abhimanyu | abhimanyu@parserlabs.com | We need exception request for this CVE as it is not yet fixed for 7.X version |