this post was submitted on 16 Apr 2025
789 points (99.6% liked)

Technology

69109 readers
3089 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
789
CVE Board members launch the CVE Foundation, a dedicated, non-profit to continue identifying vulnerabilities, after the US ended its contract with Mitre (www.thecvefoundation.org)
submitted 6 days ago by Tea to c/[email protected]
44 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 10 points 6 days ago* (last edited 6 days ago)

That's long since been the case, e.g. the Linux Kernel assigns its own CVE numbers, they're a CNA. Which keeps the "root" CVS database completely out of the loop short of saying "this here is your namespace and scope". Canonical is a CNA, Airbus is a CNA, both covering their own products. 453 in total.

Still important to have a fallback though because not all projects are big enough to do that kind of stuff, and you always want there to be some database you can report something against.