Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 2 Sep 2019 16:25:21 +0200
From: Johannes Segitz <>
Subject: Re: MITRE response time

On Mon, Sep 02, 2019 at 04:15:02PM +0200, Heiko Schlittermann wrote:
> what is your experience with MITRE's response time to an CVE request?

Usually one or two days

> Last thursday I requested a CVE on behalf of a project I'm involved in
> (and which is not covered by any of the CNAs listed on
> Where do you request CVEs for projects not listed there?

Directly from MITRE:

GPG Key E7C81FA0       EE16 6BCE AD56 E034 BFB3  3ADD 7BF7 29D5 E7C8 1FA0
Subkey fingerprint:    250F 43F5 F7CE 6F1E 9C59  4F95 BC27 DD9D 2CC4 FD66
SUSE Software Solutions Germany GmbH, Maxfeldstr. 5, 90409 Nuernberg
Geschäftsführer: Felix Imendörffer (HRB 247165, AG München)

Download attachment "signature.asc" of type "application/pgp-signature" (834 bytes)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.