Re: [oss-security] Concerns about CVE coverage shrinking - direct impact to researchers/companies

• To: "David A. Wheeler" <dwheeler@dwheeler.com>, cve-editorial-board-list <cve-editorial-board-list@lists.mitre.org>
• Subject: Re: [oss-security] Concerns about CVE coverage shrinking - direct impact to researchers/companies
• From: Kurt Seifried <kseifried@redhat.com>
• Date: Wed, 9 Mar 2016 12:06:26 -0700
• Cc: oss-security <oss-security@lists.openwall.com>
• Delivery-date: Wed Mar 9 16:11:41 2016
• In-reply-to: <E1adjOu-0005MK-Kx@rmm6prod02.runbox.com>
• List-help: <mailto:LISTSERV@LISTS.MITRE.ORG?body=INFO%20CVE-EDITORIAL-BOARD-LIST>
• List-owner: <mailto:CVE-EDITORIAL-BOARD-LIST-request@LISTS.MITRE.ORG>
• List-subscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-subscribe-request@LISTS.MITRE.ORG>
• List-unsubscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-unsubscribe-request@LISTS.MITRE.ORG>
• References: <CANO=Ty3pi9EBe-yARnJamWb1hW9p0Bztmj_Gr9SyWyXDqfCLDQ@mail.gmail.com> <E1adjOu-0005MK-Kx@rmm6prod02.runbox.com>
• Sender: <owner-cve-editorial-board-list@lists.mitre.org>
• Spamdiagnosticmetadata: 00000000%2D0000%2D0000%2D0000%2D000000000000
• Spamdiagnosticmetadata: 1
• Spamdiagnosticoutput: 1:5

On Wed, Mar 9, 2016 at 12:04 PM, David A. Wheeler 
<dwheeler@dwheeler.com>
wrote:

> All - I've chatted with some of the people who fund the CVE work at 
> MITRE.
> I've learned that CVEs *are* being issued, but obviously that is 
> happening
> too slowly.
>
> They're having a meeting tomorrow (March 10) to try to figure out what
> the problems are and how to fix it.  I don't know what they'll do.
> However, I'm hopeful that  this will mean that the CVE work will get
> back on track soon.
>
> --- David A. Wheeler
>

This is literally the first I'm hearing of this, will any board members 
be
present?


-- 

--
Kurt Seifried -- Red Hat -- Product Security -- Cloud
PGP A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
Red Hat Product Security contact: secalert@redhat.com

• Follow-Ups:
  • RE: [oss-security] Concerns about CVE coverage shrinking - direct impact to researchers/companies
    • From: "Boyle, Stephen V." <sboyle@mitre.org>

• Prev by Date: Re: Regarding the Distributed Weakness Filing system
• Next by Date: RE: Regarding the Distributed Weakness Filing system
• Previous by thread: RE: Regarding the Distributed Weakness Filing system
• Next by thread: RE: [oss-security] Concerns about CVE coverage shrinking - direct impact to researchers/companies
• Index(es):
  • Date
  • Thread