bugtraq - cve-assign delays

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.64.1503191514460.4141@beijing.mitre.org>
Date: Thu, 19 Mar 2015 15:17:20 -0400 (EDT)
From: "Steven M. Christey" <coley@...re.org>
To: "fulldisclosure@...lists.org" <fulldisclosure@...lists.org>,
  bugtraq@...urityfocus.com
cc: Daniel Wood <daniel.wood@...sp.org>, XiaopengZhang <tfrist@...h.net>,
  James Hooker <seidrhrafn@...glemail.com>, peter.adkins@...nelpicnic.net,
  cleitondebian@...il.com, athiasjerome@...il.com,
  "cve-assign@...re.org" <cve-assign@...re.org>
Subject: cve-assign delays

We recognize that some requesters have experienced delays, and
sometimes lengthy delays, in getting CVE IDs assigned. We apologize
for those delays.

The number of cve-assign requests has been growing dramatically, as
has the number of unique and new requesters. Our goal is always to
provide reasonable response times, and we were caught by the spike in
requests.

We are working to improve our responsiveness through a combination of
process changes, improved communications, and staffing shifts.

We appreciate your understanding and expect that you will see positive
changes in the cve-assign response times over the coming weeks.

Best regards,
Steve Christey Coley