Post #3800840
2026-07-14 05:18 UTC
@darakian@fosstodon.org
This one is a special case GNA. The GNA itself combine the proposals.
But it doesn’t block other GNA to publish their point of view. There is no dispute resolution in GCVE as each GNA can publish their point of view including opposition.
Via relationships https://gcve.eu/bcp/gcve-bcp-05/#potential-relationship-verbs-for-vulnerability-identifiers
@westonsteimel@hachyderm.io @gcve@social.circl.lu
Replies (1)
-
@darakian@fosstodon.org 2026-07-14 17:03
@adulau@infosec.exchange Is there any GNA* that is acting as a first mover and demonstrating what “good” looks like? I suspect that this sort of effort will run into disputes relatively quickly and disputes tend to require judgement and grace to resolve. My thinking is that the only records people will bother to “fix” will be ones the publisher did poorly on. * I’m assume GNA is roughly analogous to a CNA from the cve system. Please correct me if I’m wrong. @westonsteimel@hachyderm.io @gcve@social.circl.lu