[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: CNA Rules Revision Process

We will include the comments captured on that 1.1.3 document in the current review cycle. We will work off the current, official rules, version 1.1, as the starting place for this revision cycle. Version 1.1, the one currently posted on the CVE main website, is the "one document" to review.






From: "Landfield, Kent" <Kent_Landfield@McAfee.com>
Date: Thursday, July 6, 2017 at 10:36
To: jericho <jericho@attrition.org>, "Adinolfi, Daniel R" <dadinolfi@mitre.org>
Subject: Re: CNA Rules Revision Process


Yes, good question Brian.  Which is the most current version the github has a later date on it.


It would be nice to have one document to review.



Kent Landfield



On 7/5/17, 7:01 PM, "owner-cve-cna-list@lists.mitre.org on behalf of jericho" <owner-cve-cna-list@lists.mitre.org on behalf of jericho@attrition.org> wrote:


    Received this on a BCC, but two copies. Presumably to the CEB and CNA



    On Wed, 5 Jul 2017, Adinolfi, Daniel R wrote:


    : The CNA Rules are reviewed annually. During this review, the CVE Board

    : and the CNAs have an opportunity to make suggestions about what changes

    : could be made to the Rules. Changes to the CNA Rules can include new

    : rules, rule removal or change, clarifications, or other changes that

    : will improve the CNA program.


    : The current CNA rules are located here:


    Before we get started, wasn't there a CNA_Rules_v1.3.docx copy that we had

    given extensive feedback on?





    Where does the feedback in that document fit in with this mail / request?






Page Last Updated or Reviewed: July 06, 2017