csaf — archive

[Stefan Hagen]

[14:42] Room information was updated by: Stefan Hagen --- OASIS Common Security Advisory Framework (CSAF) TC Weekly Meeting (Conference Call) #5 - Wednesday, 29 March 2017, 01:00pm to 02:00pm EST (UTC-5) - i.e. 2017-03-29 19:00 to 20:00 CEST (UTC+2) - other timezone? Try eg.: - http://www.timeanddate.com/worldclock/meetingdetails.html?year=2017&month=3&day=29&hour=18&min=0&sec=0&p1=47&p2=69&p3=179 Meeting Member URL: - URL = https://www.oasis-open.org/apps/org/workgroup/csaf/event.php?event_id=44454 - Please use starting approx. 15 minutes before the meeting for self registration. Thanks. - Self registration link (as a service): - https://www.oasis-open.org/apps/org/workgroup/csaf/record_my_attendance.php?event_id=44454&confirmed=1 Agenda-Draft E-Mail URL: - E-Mail Public URL = https://lists.oasis-open.org/archives/csaf/201703/msg00022.html Minutes Draft Public URL (previous meeting): - URL = https://www.oasis-open.org/committees/download.php/60372/csaf-minutes-20170222-meeting-4.html Voice and Screenshare (WEBEX MEETING): - Join By URL: - https://cisco.webex.com/cisco/j.php?MTID=mef3d86408c9d05079621625195aad613 - Meeting number (access code): 205 963 971 - Host key: 448505 - Meeting password: 32KbRC2A (32527222 from phones) - Join By Phone (ISO 3166-1 alpha-3 letter codes): - +61.2.8446.5260 (Toll) [AUS, Sydney] - +32.2.704.5072 (Toll) [BEL, Brussels] - +49.619.6773.9002 (Toll) [DEU, Eschborn] - +44.20.7496.3743 (Toll) [GBR, London] - 0120.312271 (Toll-Free) [JPN] - +81.3.5763.9394 (Toll) [JPN, Tokyo] - +31.20.357.1487 (Toll) [NLD, Amsterdam] - +966.1.218.2666 (Toll) [SAU, Riyadh] - +1.866.432.9903 (Toll-free) [USA CAN] - +1.408.525.6800 (Toll) [US CAN] Agenda: - Roll Call (please register yourselves short before the meeting - thanks) - URL = https://www.oasis-open.org/apps/org/workgroup/csaf/record_my_attendance.php?event_id=44454&confirmed=1 - Approval of Agenda - Approval of Minutes from Previous Meeting #4 (2017-02-22) - URL = https://www.oasis-open.org/committees/download.php/60372/csaf-minutes-20170222-meeting-4.html - Status of current activities and contributions - Review of version 1.2 candidate CSD01 WD01 revision 2017-03-29 - Sample Motion - I move that the TC approve CSAF Common Vulnerability Reporting Framework (CVRF) Version 1.2 Working Draft 01 and all associated artifacts packaged together in https://www.oasis-open.org/committees/download.php/60393/csaf-cvrf-1.2-csd01-wd01.zip as Committee Specification Draft 01 and designate the Microsoft Word version of the specification as authoritative. I further move that the TC approve submitting the aforementioned Committee Specification Draft 01 for 30 days of public review. - Any Other Business - Adjourn Slides: - URL = https://www.oasis-open.org/committees/download.php/60375/CSAF-CVRF-v-1-2-CSD01-WD01-draft-2017-03-24-editor-notes-lo-res.pdf Chat: - URL = http://webconf.soaphub.org/conf/room/csaf # <-- this place [14:43] Stefan Hagen: RegInfo{Voting Members: 1 of 27 (3%) (used for quorum calculation)} [18:43] Stefan Hagen: RegInfo{Voting Members: 2 of 27 (7%) (used for quorum calculation)} [18:51] Stefan Hagen: RegInfo{Voting Members: 2 of 27 (7%) (used for quorum calculation)} [18:54] Stefan Hagen: RegInfo{Voting Members: 3 of 27 (11%) (used for quorum calculation) } [18:55] anonymous morphed into Omar Santos (Cisco) [18:56] Troy Fridley morphed into Troy Fridley (Cisco) [18:56] Stefan Hagen: RegInfo{Voting Members: 4 of 27 (14%) (used for quorum calculation)} [18:57] Stefan Hagen: RegInfo{Voting Members: 5 of 27 (18%) (used for quorum calculation)} [18:59] anonymous1 morphed into Jared Semrau [18:59] Stefan Hagen: RegInfo{Voting Members: 5 of 27 (18%) (used for quorum calculation)} [19:00] Stefan Hagen: RegInfo{Voting Members: 6 of 27 (22%) (used for quorum calculation)} [19:01] Stefan Hagen: RegInfo{Voting Members: 6 of 27 (22%) (used for quorum calculation)} [19:02] Stefan Hagen: RegInfo{Voting Members: 7 of 27 (25%) (used for quorum calculation)} [19:03] Stefan Hagen: RegInfo{Voting Members: 9 of 27 (33%) (used for quorum calculation)} [19:04] Stefan Hagen: Chair announces that without quorum we will start with informative items [19:04] Stefan Hagen: Please all register so we may obtain quorum during meeting. Otherwise we will have to move or vote via email [19:07] Stefan Hagen: Philip Boles has hand raised [19:08] Stefan Hagen: RegInfo{Voting Members: 10 of 27 (37%) (used for quorum calculation)} [19:09] Stefan Hagen: Mistake - lowered [19:09] Stefan Hagen: hand [19:12] Stefan Hagen: eric raised some nits on mailing list but does not consider those ax blocking a first public comments release [19:15] Stefan Hagen: harold asks if CSAF-21 has been applied? [19:15] Stefan Hagen: Stefan states that yes [19:16] Stefan Hagen: feng and harold discuss the v1.1 situation w.r.t mandatory or optional CVSSScoreSets [19:20] Stefan Hagen: feng suggests to leave cvss3 mandatory and if some vendor only supports v2 cvss they should stay with cvrf v1.1 so couple chaff cvrf v1.2 with mandatory cvss v3 [19:20] Stefan Hagen: all discuss the 2 dimensional version matrix combinations and the implication [19:22] Stefan Hagen: art asks for if cvrf 1.2 should require 0 or more of both versions cvss? [19:23] Stefan Hagen: feng suggests to have 1 or more cvss v3 and 0 or more cvss v2 [19:24] Stefan Hagen: art suggests to have a vote [19:24] Stefan Hagen: omar notes this must be via mail as meeting is not quorate [19:24] Stefan Hagen: art will do [19:25] Stefan Hagen: omar opens the floor for questions [19:25] Stefan Hagen: no questions [19:26] Stefan Hagen: meeting adjourned by chair