Re: CNA Rules Revision Process

["Adinolfi, Daniel R" <dadinolfi@mitre.org>]

We will include the comments captured on that 1.1.3 document in the current review cycle. We will work off the current, official rules, version 1.1, as the starting place for this revision cycle. Version 1.1, the one currently posted on the CVE main website, is the "one document" to review.

 

Thanks.

 

-Dan

 

From: "Landfield, Kent" <Kent_Landfield@McAfee.com>
Date: Thursday, July 6, 2017 at 10:36
To: jericho <jericho@attrition.org>, "Adinolfi, Daniel R" <dadinolfi@mitre.org>
Subject: Re: CNA Rules Revision Process

 

Yes, good question Brian.  Which is the most current version the github has a later date on it.

 

It would be nice to have one document to review.

 

--

Kent Landfield

817-637-8026

kent_landfield@mcafee.com

 

On 7/5/17, 7:01 PM, "owner-cve-cna-list@lists.mitre.org on behalf of jericho" <owner-cve-cna-list@lists.mitre.org on behalf of jericho@attrition.org> wrote:

 

    Received this on a BCC, but two copies. Presumably to the CEB and CNA

    list.

    

    On Wed, 5 Jul 2017, Adinolfi, Daniel R wrote:

    

    : The CNA Rules are reviewed annually. During this review, the CVE Board

    : and the CNAs have an opportunity to make suggestions about what changes

    : could be made to the Rules. Changes to the CNA Rules can include new

    : rules, rule removal or change, clarifications, or other changes that

    : will improve the CNA program.

    :

    : The current CNA rules are located here:

    : <http://cve.mitre.org/cve/cna/CNA_Rules_v1.1.pdf>

    

    Before we get started, wasn't there a CNA_Rules_v1.3.docx copy that we had

    given extensive feedback on?

    

    Ah:

    

    https://github.com/CVEProject/docs/blob/gh-pages/cna/CNA%20Rules%20v1.1.3.docx

    

    Where does the feedback in that document fit in with this mail / request?

    

    Brian