oss-security - Re: CVE request : client-side file creation via XSLT in Webkit

Openwall GNU/*/Linux 3.0 - a small security-enhanced Linux distro for servers

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon, 9 May 2011 14:59:19 -0400 (EDT)
From: "Steven M. Christey" <coley@...-smtp.mitre.org>
To: Josh Bressers <bressers@...hat.com>
cc: oss-security@...ts.openwall.com
Subject: Re: CVE request : client-side file creation via XSLT
 in Webkit

All,

Note that due to all the Apple/Google confusion, we recently arranged for 
Google to become a CVE CNA (i.e. have their own CVEs), and now they are 
the primary coordinator for CVE assignment in Webkit issues (specifically, 
Chris Evans).  Not sure whether the current issue has CVE coverage or not.

- Steve

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.