Critical · urgent · major — the vendor's top rating, or no rating while CVEs are listed: red pill and barImportant · high · medium — the vendor's second ratingModerate · medium · low — the vendor's other ratingsthe rating is the vendor's: AlmaLinux Critical / Important / Moderate, Low; Fedora and EPEL urgent / high / medium, low; Ubuntu (USN OVAL) Critical / High / Medium, Low; nginx.org major / medium / low; modules — CVSS from the CVE record critical / high / medium, low; PowerDNS Critical, High / Medium / LowUbuntu pockets: proposed — published for testing, updates — released, security — released as a security fix
sources and rules (3) · checked 10 min ago
okUbuntu 24.04 LTS · GA · Launchpad · checked · changed method Launchpad API (getPublishedSources): when the kernel source was published in proposed, updates and security, its status · rule every 15 min; the first time — a year of history; Launchpad is down — the archive's Release and Sources.xz (archive.ubuntu.com, security.ubuntu.com; sha256 from Release): a new kernel shows up with the Release time
okUbuntu · security notices (USN) · checked · changed method the notices RSS (latest 10) → JSON of new kernel notices → USN number, date, CVE count for the source version · rule every 30 min; the first time — 2 pages of notices.json per release; the rating comes from the USN OVAL
304Ubuntu noble · notice ratings (USN OVAL) · checked · changed method conditional GET of the release's USN OVAL (bz2) → Ubuntu's rating of every notice (Critical, High, Medium, Low) · rule every 6 h; ~1.3 MB, only when changed; shared by kernels and nginx
vigil