Conversation

Following up to myself do any people know who to complain at when someone files a CVE against a literal 20 year old unsupported version of software you maintain?

2
0
0

@trini sounds like something @gregkh may have the answer to. Or at least a few fun similar stories.

0
0
0
@trini Contact the CNA that created it and get them to reject it, if they don't complain to cve.org.
1
0
1

@gregkh Ah, that would be MITRE themselves, so I guess I'll try complaining via https://cveform.mitre.org/ for now, thanks!

0
0
0