Re: Current and future CVE states

• To: Art Manion <amanion@cert.org>, Kurt Seifried <kurt@seifried.org>, cve-editorial-board-list <cve-editorial-board-list@LISTS.MITRE.ORG>
• Subject: Re: Current and future CVE states
• From: "Landfield, Kent" <Kent_Landfield@McAfee.com>
• Date: Wed, 3 May 2017 22:20:24 +0000
• Accept-language: en-US
• Authentication-results: spf=none (sender IP is 129.83.29.3) smtp.mailfrom=LISTS.MITRE.ORG; mitre.mail.onmicrosoft.com; dkim=none (message not signed) header.d=none;mitre.mail.onmicrosoft.com; dmarc=none action=none header.from=McAfee.com;
• Delivery-date: Thu May 4 07:43:56 2017
• In-reply-to: <165d2dcc-3f53-2f3f-db68-61e3e379934a@cert.org>
• List-help: <mailto:LISTSERV@LISTS.MITRE.ORG?body=INFO%20CVE-EDITORIAL-BOARD-LIST>
• List-owner: <mailto:CVE-EDITORIAL-BOARD-LIST-request@LISTS.MITRE.ORG>
• List-subscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-subscribe-request@LISTS.MITRE.ORG>
• List-unsubscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-unsubscribe-request@LISTS.MITRE.ORG>
• References: <CABqVa3_POGWZecLZE9+DeOu1GPNFxs05T8DgcEKhzoz6Ex9rcA@mail.gmail.com> <165d2dcc-3f53-2f3f-db68-61e3e379934a@cert.org>
• Sender: <owner-cve-editorial-board-list@lists.mitre.org>
• Spamdiagnosticmetadata: 6cdb8bfc89744bd8bfee511e3e65aa05
• Spamdiagnosticoutput: 1:2
• Thread-index: AQHSxETPeu/qrUZNdEiaNnbP95iaOqHjLCaA//+ufAA=
• Thread-topic: Current and future CVE states

Yes, Yes, and Yes....  vxref is what we should be using.

--
Kent Landfield
817-637-8026
kent_landfield@mcafee.com

On 5/3/17, 5:12 PM, "owner-cve-editorial-board-list@lists.mitre.org on 
behalf of Art Manion" <owner-cve-editorial-board-list@lists.mitre.org 
on behalf of amanion@cert.org> wrote:

    On 2017-05-03 15:36, Kurt Seifried wrote:
    
    > DUPLICATE_OF [CVE]
    > 
    > SPLIT_TO [list of CVEs]
    > 
    > MERGED_TO [lCVE]
    
    If we're going to get into relationships between vulnerabilities --
    which is related to, but possibly a bit beyond state -- I'd like to
    brief the board (or automation group) on vxref, which is a 
structured
    relationship system.
    
    https://github.com/FIRSTdotorg/vrdx-sig-vxref-wip/tree/master/vxref
    
    
https://github.com/CERTCC-Vulnerability-Analysis/Vulnerability-Data-Archive-Tools
    
    Regards,
    
     - Art
    

• Follow-Ups:
  • Re: Current and future CVE states
    • From: Kurt Seifried <kseifried@redhat.com>

• References:
  • Current and future CVE states
    • From: Kurt Seifried <kurt@seifried.org>
  • Re: Current and future CVE states
    • From: Art Manion <amanion@cert.org>

• Prev by Date: Re: Current and future CVE states
• Next by Date: Re: Current and future CVE states
• Previous by thread: Re: Current and future CVE states
• Next by thread: Re: Current and future CVE states
• Index(es):
  • Date
  • Thread