Security Working Group meeting - Wednesday May 25 - results

[Joseph Reynolds]

On 5/25/22 9:59 AM, Joseph Reynolds wrote:
> This is a reminder of the OpenBMC Security Working Group meeting 
> scheduled for this Wednesday May 25 at 10:00am PDT.
>
> We'll discuss the following items on the agenda 
> <https://docs.google.com/document/d/1b7x9BaxsfcukQDqbvZsU2ehMq4xoJRQvLxxsDUWmAOI>, 
> and anything else that comes up:

1 We discussed progress toward following our CVE process.  Documented 
workflow: Allocate CVEs from Mitre.  Move existing vulns from email list 
to github issues.  Publish CVEs.

Allocated CVE block.  Use vulnogram tool.



>
> Access, agenda and notes are in the wiki:
> https://github.com/openbmc/openbmc/wiki/Security-working-group 
> <https://github.com/openbmc/openbmc/wiki/Security-working-group>
>
> - Joseph