Then regarding the OSSA task, we don't issue advisories for experimental feature, and if I understand correctly, ovsfw is still experimental/incomplete. Thus if it's not a class D, then it is at best a class B3.
I have created an OSSN task to discuss the scope of this bug, perhaps it could use a security note.
IWAMOTO, I guess you could use this definition: https:/ /cve.mitre. org/about/ terminology. html#vulnerabil ity
Then regarding the OSSA task, we don't issue advisories for experimental feature, and if I understand correctly, ovsfw is still experimental/ incomplete. Thus if it's not a class D, then it is at best a class B3.
I have created an OSSN task to discuss the scope of this bug, perhaps it could use a security note.