Sicherheit
Wie wir mit Schwachstellen umgehen
Gelhaus Solutions ist die antragstellende Stelle hinter der CNA, die diese Arbeit abdeckt. Die Richtlinie sagt, wozu wir uns verpflichten, der Geltungsbereich sagt, was erfasst ist, und die Belege zeigen, was tatsächlich veröffentlicht wurde.
Drei Dokumente
What we commit to, what is covered by it, and what has actually been published. The last of those carries live figures with their sources and the date each was checked.
| Dokument | Was es beantwortet |
|---|---|
| Offenlegungsrichtlinie | Wie man etwas meldet, was danach geschieht, und die Fristen, zu denen sich Gelhaus Solutions verpflichtet. |
| CNA-Geltungsbereich | Which software is covered by the CVE Numbering Authority, and which is deliberately excluded. |
| Die Belege | Every figure this organisation states about its own advisory work, with the source and the time it was last checked. |
Reporting a vulnerability in any of this: the channels are on the contact page, and the machine-readable version is at /.well-known/security.txt.
The person behind Gelhaus Solutions also holds a CNA role at Postiz, which is a different organisation and a different programme. That work is described on his own site.