[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 19 Oct 2011 12:58:11 -0400 (EDT)
From: "Steven M. Christey" <coley@...-smtp.mitre.org>
To: oss-security@...ts.openwall.com
Subject: Re: CVE request: piwik before 1.6
On Wed, 19 Oct 2011, Hanno Böck wrote:
> Regarding CVEs, i suggest adding one for every name, e.g.
> "Unknown security vulnerability in piwik before 1.6 discovered by
> Alexandru Pitis" etc., until we know more about it.
This is consistent with current practice, where we assign separate CVEs
for issues found by different researchers. With the (limited) knowledge
that's available right now, all the vulns are the same type, i.e.,
"unspecified."
- Steve
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
