BCP-05 and "Adoption of CSAF for vulnerability reports submission pre-embargo using TLP markings and phased release to public CSAF report."

Submitted ⁨⁨1⁩ ⁨week⁩ ago⁩ by ⁨adulau@discourse.ossbase.org⁩ to ⁨gcve@discourse.ossbase.org⁩

Reading this:

"Adoption of CSAF for vulnerability reports submission pre-embargo using TLP markings and phased release to public CSAF report"

But I think it's actually we do with BCP-05 (using a standard CVE-record format), you can pre-edit the vulnerability before it's actually disclosed.

What you think of this? @cedric any PoV?

Comments

Sort:hotnew top