Resurrecting DWF [LWN.net]

Resurrecting DWF

Posted Apr 8, 2021 0:20 UTC (Thu) by lucaswerkmeister (subscriber, #126654)
Parent article: Resurrecting DWF

It’s going to be interesting when the first vulnerability with a DWF “CVE ID” gets enough attention to also be assigned an official CVE ID afterwards. (From the interactions mentioned in the article, it doesn’t seem like the CVE project would want to just let the DWF-assigned ID stand alone.)

to post comments

Resurrecting DWF

Posted Apr 8, 2021 1:03 UTC (Thu) by joshbressers (subscriber, #151533) [Link] (1 responses)

It won't be interesting at all actually. We expect the DWF ID to be marked as a duplicate and refer to the MITRE CVE ID

Our intention is to avoid potentially silly situations

Resurrecting DWF

Posted Apr 8, 2021 2:17 UTC (Thu) by kurtseifried (guest, #57307) [Link]

I thought we had this documented somewhere but I can't find it. Added an issue to cover this:

https://github.com/distributedweaknessfiling/dwf-workflow...