Streamlining CVE assignment for glibc

Florian Weimer fweimer@redhat.com
Fri Oct 2 18:16:00 GMT 2015


On 10/02/2015 08:06 PM, Roland McGrath wrote:
> Please write it all up on the glibc wiki.

Which aspect?  The relevant parts of the CVE assignment process are
covered here:

  <https://sourceware.org/glibc/wiki/Security%20Process>

I just added hyperlinks to <http://cve.mitre.org/about/>.  The inner
workings of CVE assignment are less relevant unless glibc becomes an
independent CNA, but I really don't see a reason for that.

Or do you need a reason why we are doing this?

Florian



More information about the Libc-alpha mailing list