CERT Guide to CVD v2024.4.2

What's Changed

• Incorporate Disclosure Policy Templates from https://github.com/CERTCC/vulnerability_disclosure_policy_templates
• Minor fixes and copy edits
• Use cve.org links instead of cve.mitre.org / nvd.nist.gov
• update dependencies

Full Changelog: v2024.4.1...v2024.4.2

CERT Guide to CVD v2024.4.1

Minor fixes since v2024.4

What's Changed

• Post release cleanup by @ahouseholder in #21
• revise vendor advice by @ahouseholder in #22
• open external links in new tab by @ahouseholder in #23

Full Changelog: v2024.4...v2024.4.1

CERT Guide to CVD v2024.4

The CERT® Guide to Coordinated Vulnerability Disclosure is an ongoing project by the CERT/CC to document the process, roles, phases, and concepts of vulnerability disclosure.

In this latest version, we've made the following updates:

• The current version of the Guide is online at https://certcc.github.io/CERT-Guide-to-CVD/
• Guide content is now fully managed in this GitHub repository
• Converted site from Confluence Wiki to MkDocs and Material for MkDocs
• We have reorganized the content into sections based on the Diátaxis Framework
• More call-outs and sidebars to break up monolithic content
• Added more diagrams
• Some revisions or expansion about new or emerging issues in CVD: AI, IoT, supply chain, etc.
• Converted Troubleshooting CVD content to CVD Recipe Cards highlighting problem ingredients and solution recipes
• Improved section summaries and increased cross-references within pages so it's easier to find what you need regardless of where you start
• Incorporated more basic guidance for Reporters, Vendors, and Deployers in the Learning CVD section
• Organized How-To section according to the overall process flow: Preparation, Initiation, Coordination, Operation

What's Changed

• New mkdocs+material site by @ahouseholder in #18
• Bump the mkdocs group with 2 updates by @dependabot in #19

New Contributors

• @ahouseholder made their first contribution in #18
• @dependabot made their first contribution in #19

Full Changelog: https://github.com/CERTCC/CERT-Guide-to-CVD/commits/v2024.4