Resurrecting DWF
Resurrecting DWF
Posted Apr 8, 2021 23:36 UTC (Thu) by cjwatson (subscriber, #7322)In reply to: Resurrecting DWF by danielthompson
Parent article: Resurrecting DWF
I help maintain a website (launchpad.net) that among many other things imports CVE information from the XML dump provided by MITRE and auto-links references that people make to them from other parts of the site: this means that for instance if people mention CVE-something in a bug report then it's easy to click through to all other bug reports on Launchpad that relate to the same CVE identifier. What should we most correctly do now that there seem to be arguably two authorities for the same namespace?
(This is not a loaded question: I'm not a security researcher nor somebody particularly invested in the existing CVE system. I just want to figure out what we should be doing to track this in case people use these new DWF-issued identifiers on Launchpad and expect them to work the same way, which seems likely. "Use a search engine" isn't an option here: we maintain these links automatically and want to keep it that way.)
