oss-security - RE: MITRE is adding data intake to its CVE ID process

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <D999895D83BF47489B7647E60E228B4702FE5B8A@EX10MBOX05.pnnl.gov>
Date: Fri, 10 Feb 2017 19:59:52 +0000
From: "Maier, Kurt H" <kurt.maier@...l.gov>
To: "'oss-security@...ts.openwall.com'" <oss-security@...ts.openwall.com>
Subject: RE: MITRE is adding data intake to its CVE ID process

> From: Priedhorsky, Reid [mailto:reidpr@...l.gov]
> I’ve been using the CVE requests on oss-security to maintain a reasonably
> comprehensive and timely list of vulnerabilities for specific products. It’s
> not clear to me how to do this when CVE requests happen offline in a web
> form.
> 
> Has this use case been considered? Is there an alternate way to accomplish
> my goal?


This is why I am subscribed to oss-security, and I'd appreciate it if there were
an alternate solution in place before the CVE system disappears behind an
inscrutable web form.

Thanks,
khm

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.