full-disclosure - [FD] cve-assign delays

Open Source and information security mailing list archives

Message-ID: <Pine.LNX.4.64.1503191514460.4141@beijing.mitre.org>
Date: Thu, 19 Mar 2015 15:17:20 -0400 (EDT)
From: "Steven M. Christey" <coley@...re.org>
To: "fulldisclosure@...lists.org" <fulldisclosure@...lists.org>,
	bugtraq@...urityfocus.com
Cc: XiaopengZhang <tfrist@...h.net>, James Hooker <seidrhrafn@...glemail.com>,
	"cve-assign@...re.org" <cve-assign@...re.org>
Subject: [FD] cve-assign delays

We recognize that some requesters have experienced delays, and
sometimes lengthy delays, in getting CVE IDs assigned. We apologize
for those delays.

The number of cve-assign requests has been growing dramatically, as
has the number of unique and new requesters. Our goal is always to
provide reasonable response times, and we were caught by the spike in
requests.

We are working to improve our responsiveness through a combination of
process changes, improved communications, and staffing shifts.

We appreciate your understanding and expect that you will see positive
changes in the cve-assign response times over the coming weeks.

Best regards,
Steve Christey Coley

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives