Date: Tue, 4 Feb 2014 09:48:38 -0500 (EST) From: cve-assign@...re.org To: vdanen@...hat.com Cc: cve-assign@...re.org, oss-security@...ts.openwall.com Subject: Re: CVE request and heads-up on insecure temp file handling in unpack200 (OpenJDK, Oracle Java) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > I'm not sure if MITRE will be handling the assignment or if Oracle > will, We don't want to rule out the possibility that someone from Oracle will reply to the list and mention that this issue was the topic of an earlier private report to Oracle, and already has a CVE ID assigned. In general, MITRE will coordinate with Oracle to avoid a duplicate assignment. - -- CVE assignment team, MITRE CVE Numbering Authority M/S M300 202 Burlington Road, Bedford, MA 01730 USA [ PGP key available through http://cve.mitre.org/cve/request_id.html ] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (SunOS) iQEcBAEBAgAGBQJS8Pz/AAoJEKllVAevmvms22kH/3seljXSIQBQc4RHGdXASiNp iAuFo0RbOWUpASGKX0Roo0aL3XVJGiieffeOtmbV1D434tffB5cuCdlUnQ7kE/Pw Q54JO778WDzNhOyeV/AKITYKHcEmjpw/f2Qtoig2Y5FEoOAlI+c2rE4i/sIJ84kD cfuTD6DCxNEWwf9XCHS9Ee1bxCZNnI1od+CDk+B6dcIrW9fXytoZiUO5caaWDtmC QfS7ok2m3ykkCTWdABnl+ix8nqu3KtOWGtAa/6rvprt4wzw2jP7r3Jno//qjiVVf 0K50+tSByIHvC1PdZHUiFavne1CefI2W+KOAdXh2fTi9Aa4z8/aq7gS8HTCngS4= =fvTN -----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Powered by Openwall GNU/*/Linux - Powered by OpenVZ