|
|
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: CVEs with no REF URL (or a REF URL that is self referential)
- To: Art Manion <amanion@cert.org>
- Subject: Re: CVEs with no REF URL (or a REF URL that is self referential)
- From: Kurt Seifried <kurt@seifried.org>
- Date: Wed, 4 Oct 2017 15:54:19 -0600
- Authentication-results: spf=none (sender IP is 129.83.29.2) smtp.mailfrom=LISTS.MITRE.ORG; mitre.mail.onmicrosoft.com; dkim=none (message not signed) header.d=none;mitre.mail.onmicrosoft.com; dmarc=none action=none header.from=seifried.org;
- Cc: cve-editorial-board-list <cve-editorial-board-list@lists.mitre.org>
- Delivery-date: Thu Oct 5 07:44:47 2017
- In-reply-to: <57dcc502-fda1-8ac3-8347-ed31319c5ccf@cert.org>
- List-help: <mailto:LISTSERV@LISTS.MITRE.ORG?body=INFO%20CVE-EDITORIAL-BOARD-LIST>
- List-owner: <mailto:CVE-EDITORIAL-BOARD-LIST-request@LISTS.MITRE.ORG>
- List-subscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-subscribe-request@LISTS.MITRE.ORG>
- List-unsubscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-unsubscribe-request@LISTS.MITRE.ORG>
- References: <CABqVa3-jbSjdzo9-4aPGyxXRUVWFDt=eaCqw8S6W=fuN3V6vmg@mail.gmail.com> <57dcc502-fda1-8ac3-8347-ed31319c5ccf@cert.org>
- Sender: <owner-cve-editorial-board-list@lists.mitre.org>
- Spamdiagnosticmetadata: 5952c28dcc454f0789fb433d26f936ef
- Spamdiagnosticoutput: 1:2
On Wed, Oct 4, 2017 at 3:19 PM, Art Manion <amanion@cert.org> wrote:
On 10/4/17 12:48 PM, Kurt Seifried wrote:
And, why submit embargoed issues to CVE before the embargo is over? Wait until public, and then you also have a git commit URL.
I'm not talking about submitting embargoed info (that would break the embargo, so obviously I can't do that).
The embargo often is set for a time and the commits/vendor announcements/etc all take time. Rather then wait and check and update the CVE entry with the ref URL it would be much easier just to fire off the CVE that is self contained to the database so there is something nearly immediately in the database (we're finding this helps a lot with the higher profile messy issues).
- Art
Kurt Seifried
kurt@seifried.org
kurt@seifried.org
- Follow-Ups:
- Re: CVEs with no REF URL (or a REF URL that is self referential)
- From: Art Manion <amanion@cert.org>
- Re: CVEs with no REF URL (or a REF URL that is self referential)
- References:
- CVEs with no REF URL (or a REF URL that is self referential)
- From: Kurt Seifried <kurt@seifried.org>
- Re: CVEs with no REF URL (or a REF URL that is self referential)
- From: Art Manion <amanion@cert.org>
- CVEs with no REF URL (or a REF URL that is self referential)
- Prev by Date: Re: CVE For Services
- Next by Date: Re: CVE For Services
- Previous by thread: Re: CVEs with no REF URL (or a REF URL that is self referential)
- Next by thread: Re: CVEs with no REF URL (or a REF URL that is self referential)
- Index(es):