A single vulnerability can impact different Linux distributions in different ways, giving both a general severity value, and specific severity data based on specific Linux security advisories.
If these separate sets of data are represented by a single severity score, this detailed information is lost.
Relative Importance asserts a common severity for a vulnerability and shows the underlying detailed information for that severity, based on multiple sources. This helps developers and analysts view a common level of importance, and exposes the underlying information that helped form the given severity.
View relative importance
(Currently in closed beta)
New information appears in the Security information section of the project page, for each issue:
External information sources
We use the following external sources to provide this information for Debian and Ubuntu: