[
Date Prev
][
Date Next
][
Thread Prev
][
Thread Next
][
Date Index
][
Thread Index
]
Re: upcoming intel issue
On 1/3/18 3:00 PM, Kurt Seifried wrote:
So the thing that's in the news, assuming it has CVEs, can we make sure
they are populated to the CVE database asap, and if Intel does not do
we have a plan B (e.g. MITRE writes them up?).
Also in general I think we should probably figure out some guidelines
for these high visibility issues, e.g. encourage the original CNA to
get them into the database asap, and have a plan B in case they don't
(e.g. MITRE or someone else with info writes them up? first come first
served? trusted parties only? or?).
Indirectly related, I'd concede that this is a hardware vulnerability,
even if patches are coming from operating system vendors.
- Art
