Welcome to the latest issue of the CVE-Announce e-newsletter. This email newsletter is designed to bring recent news about Common Vulnerabilities and Exposures (CVE), such as new compatible products, new website features, CVE in the news, etc. right to your email box. CVE is the standard for cyber security vulnerability names. The CVE Board provides oversight and input into CVE’s strategic direction, ensuring CVE meets the vulnerability identification needs of the technology community. CVE Numbering Authorities (CNAs) are major OS vendors, security researchers, and research organizations that assign CVE Identifiers to newly discovered issues without directly involving MITRE in the details of the specific vulnerabilities, and include the CVE Identifiers in the first public disclosure of the vulnerabilities. Details on subscribing (and unsubscribing) to the email newsletter are at the end. Please feel free to pass this newsletter on to interested colleagues.
Comments: cve@mitre.org
-------------------------------------------------------
CVE-Announce e-newsletter/August 29, 2016
-------------------------------------------------------
Contents:
1. New Method to Request CVE IDs, Updates, and More from MITRE in Effect
2. Details/Credits + Subscribing and Unsubscribing
FEATURE STORY:
New Method to Request CVE IDs, Updates, and More from MITRE in Effect
Beginning August 29, 2016, anyone requesting a CVE ID from MITRE, requesting an update to a CVE, providing notification about a vulnerability publication, or submitting comments will do so by submitting a “CVE Request” web form. The previous method of submitting requests via email has been discontinued.
The new web form will make it easier for requestors to know what information to include in their initial request, and will enhance MITRE's ability to respond to those requests in a timely manner. User guidance is available on the website and on the form itself. Upon completion of the form, the requestor will receive an immediate web acknowledgement that their form was submitted successfully, and an email confirmation which will include a reference number.
Organizations participating as CNAs assign CVE IDs for their products, and continue to be the first method requesters should use to request a CVE ID when a potential vulnerability is related to a CNA product. Requesters may also contact an emergency response or vulnerability analysis team, such as CERT/CC, or post the information to mailing lists such as BugTraq or oss-security. See https://cve.mitre.org/cve/cna.html for further information.
Feedback can be submitted through the web form or through cve@mitre.org.
LINKS:
CVE ID Request web form -
CVE Request web form guidance -
http://cve.mitre.org/about/documents.html#web_form
Request a CVE ID intro page -
https://cve.mitre.org/cve/request_id.html
CVE IDs –
CVE News page article –
---------------------------------------------------------------
Details/Credits + Subscribing and Unsubscribing
Managing Editor: Dan Adinolfi, Cyber Security Technical Center. Writer: Bob Roberge.
The MITRE Corporation (www.mitre.org) maintains CVE and provides impartial technical guidance to the CVE Board and CVE Numbering Authorities on all matters related to ongoing development of the CVE Program.
To unsubscribe from the CVE-Announce e-newsletter, open a new email message and copy the following text to the BODY of the message "SIGNOFF CVE-Announce-List", then send the message to: listserv@lists.mitre.org. To subscribe, send an email message to listserv@lists.mitre.org with the following text in the BODY of the message: "SUBSCRIBE CVE-Announce-List".
Copyright 2016, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation. CVE is sponsored by US-CERT (www.us-cert.gov) in the office of Cybersecurity and Communications (www.dhs.gov/office-cybersecurity-and-communications) at the U.S. Department of Homeland Security (www.dhs.gov).
For more information about CVE, visit the CVE website at https://cve.mitre.org or send an email to cve@mitre.org.

No comments:
Post a Comment