Re: CVE Information Sources & Scope

• To: Adam Shostack <adam@homeport.org>
• Subject: Re: CVE Information Sources & Scope
• From: "Steven M. Christey" <coley@rcf-smtp.mitre.org>
• Date: Mon, 17 Oct 2011 23:24:26 -0400
• CC: "Mann, Dave" <damann@mitre.org>, cve-editorial-board-list<cve-editorial-board-list@LISTS.MITRE.ORG>
• Delivery-Date: Mon Oct 17 23:24:41 2011
• In-Reply-To: <20111004180142.GB1806@homeport.org>
• List-Help: <mailto:LISTSERV@LISTS.MITRE.ORG?body=INFO%20CVE-EDITORIAL-BOARD-LIST>
• List-Owner: <mailto:CVE-EDITORIAL-BOARD-LIST-request@LISTS.MITRE.ORG>
• List-Subscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-subscribe-request@LISTS.MITRE.ORG>
• List-Unsubscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-unsubscribe-request@LISTS.MITRE.ORG>
• References: <3FF9F74E63A7484EB3B88F04329CBEDC04448126E0@IMCMBX1.MITRE.ORG> <20111004180142.GB1806@homeport.org>
• Sender: <owner-cve-editorial-board-list@LISTS.MITRE.ORG>

On Tue, 4 Oct 2011, Adam Shostack wrote:

> ?  Solaris  (Isn't Solaris now part of Oracle, a CNA?)

Yes, though it seems that Solaris issues are covered both in Oracle CPUs 
(sometimes), and a separate blog which includes multiple-OS issues that 
aren't covered in the CPUs (usually the blog-announced ones are just added 
to existing CVEs, but we might only see them through "patch-oriented" VDBs 
like Secunia.)

- Steve

• References:
  • CVE Information Sources & Scope
    • From: "Mann, Dave" <damann@mitre.org>
  • Re: CVE Information Sources & Scope
    • From: Adam Shostack <adam@homeport.org>

• Prev by Date: Re: CVE Information Sources & Scope
• Next by Date: CVE Get Together at NIST ITSAC?
• Prev by thread: Re: CVE Information Sources & Scope
• Next by thread: Re: CVE Information Sources & Scope
• Index(es):
  • Date
  • Thread