Re: CD PROPOSAL: INCLUSION - Interim Decision 8/23

[Kent Landfield <kent@nfr.net>]

MODIFY:

Steven M. Christey ponders:
# How about this modification:
#
# - If at least 3 non-MITRE members vote, then the vulnerability may be
#   included.

Change that to:

- If at least 3 non-MITRE members vote for inclusion, then the
                                       ^^^^^^^^^^^^^

# - If only 2 non-MITRE members vote, and the vulnerability predates the
#   initial public release of the CVE, and at least 2 well-known security
#   tools claim to check/test for the vulnerability, and at least one of
#   those tools is NOT associated with one of the voters, then the
#   vulnerability may be included.

Change that to:

- If only 2 non-MITRE members vote for inclusion, and the vulnerability ...
                                   ^^^^^^^^^^^^^
--
Kent Landfield                -         Network Flight Recorder, Inc.
Email: kent@nfr.net           +         http://www.nfr.net/
Phone: 1-817-545-2502         -         Fax: 1-817-545-7650