Re: Agenda for CVE Board Meeting Wednesday, 15 November 2017

[jericho < jericho@attrition.org >]

On Wed, 15 Nov 2017, Art Manion wrote:

: (*) YYYY is meant to be the year the vulnerability (not the CVE ID)
was
: published, right?  Not year the CVE ID was requested, assigned, or
: published?

Correct. That was the long-standing premise as I understand it, and as
various CVE folks had told me over the years.