Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 28 Feb 2012 10:57:35 +0100
From: Rafał Malinowski <rafal.przemyslaw.malinowski@...il.com>
To: Kurt Seifried <kseifried@...hat.com>
Cc: oss-security@...ts.openwall.com, Jan Lieskovsky <jlieskov@...hat.com>, 
	"Steven M. Christey" <coley@...us.mitre.org>, Mariusz Fik <fisiu@...nsuse.org>, 
	Radoslaw Lisowski <radoslaw.lisowski@...il.com>
Subject: Re: CVE Status Clarification / Request -- kadu: Stored
 XSS by parsing contact's status and sms messages in history

2012/2/27 Kurt Seifried <kseifried@...hat.com>:
> On 02/27/2012 03:05 AM, Jan Lieskovsky wrote:
>> Hello Mariusz, Kurt, Steve, vendors,
>>
>>   [1] though https://bugzilla.novell.com/show_bug.cgi?id=749036#c0
>>   mentions CVE identifier has been already requested for this:
>>
>>   "The bug still doesn't have CVE number but will have in near future."
>
> I can only assume they requested one directly from Mitre. Steve, is this
> the case? If not I'll assign one.

We haven't requested CVE number yet. Could you do that for this issue?

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.