2

Glibc becomes a CVE Numbering Authority

 3 months ago
source link: https://lwn.net/Articles/961355/
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.

Glibc becomes a CVE Numbering Authority [LWN.net]

User: Password: | |

Glibc becomes a CVE Numbering Authority

[Posted February 8, 2024 by corbet]
The GNU C Library project has been accepted as a CVE Numbering Authority (CNA), meaning that the project is now in control of the CVE numbers assigned to its code.
As a CNA the glibc security team will be working to improve the quality and response time of security advisories and mitigations.

Over the coming months, the glibc security team will define the process for the CNA and establish best practices that can also be used by the rest of the GNU Toolchain.

See this article for some background on this change.


(Log in to post comments)

Copyright © 2024, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds


About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK