Become a CVE Numbering Authority (CNA) for MediaWiki and extensions
Closed, DeclinedPublic
Actions

Assigned To

None

Authored By

	Reedy
	Apr 4 2017, 5:56 PM

Description

The main expectation would be that you are the first point of contact for mediawiki/plugin CVEs.

Documentation can be seen at https://github.com/distributedweaknessfiling/DWF-Documentation

Event Timeline

Reedy created this task.Apr 4 2017, 5:56 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptApr 4 2017, 5:56 PM

That process seems still very much in progress, including such gems as "Fill out a CNA application form (form to be created)".

Debian is a CNA and mediawiki is distributed via Debian, so I'd recommend to simply contact Debian for pre-release CVE assignment in the future.

• chasemp edited projects, added Security-team-backlog; removed Security-Team.Sep 4 2018, 4:05 PM

• chasemp edited projects, added Security-Team; removed Security-team-backlog.Dec 23 2019, 5:12 PM

• chasemp moved this task from Incoming to Back Orders on the Security-Team board.

• chasemp triaged this task as Medium priority.Dec 23 2019, 5:19 PM

• chasemp removed a project: Goal.Feb 20 2020, 9:08 PM

I think this has been discussed and decline for now. We can always revisit whenever.

Note: the most recent conversation was in early June of 2020 between me and Jo Bazar (cna-coordinator@mitre.org, jbazar@mitre.org) at Mitre. I politely told them we were not interested at this time.

Become a CVE Numbering Authority (CNA) for MediaWiki and extensionsClosed, DeclinedPublicActions

Description

Event Timeline

Become a CVE Numbering Authority (CNA) for MediaWiki and extensions
Closed, DeclinedPublic
Actions