Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 4 Feb 2014 09:48:38 -0500 (EST)
From: cve-assign@...re.org
To: vdanen@...hat.com
Cc: cve-assign@...re.org, oss-security@...ts.openwall.com
Subject: Re: CVE request and heads-up on insecure temp file handling in unpack200 (OpenJDK, Oracle Java)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> I'm not sure if MITRE will be handling the assignment or if Oracle
> will,

We don't want to rule out the possibility that someone from Oracle
will reply to the list and mention that this issue was the topic
of an earlier private report to Oracle, and already has a CVE ID
assigned. In general, MITRE will coordinate with Oracle to avoid a
duplicate assignment.

- -- 
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)

iQEcBAEBAgAGBQJS8Pz/AAoJEKllVAevmvms22kH/3seljXSIQBQc4RHGdXASiNp
iAuFo0RbOWUpASGKX0Roo0aL3XVJGiieffeOtmbV1D434tffB5cuCdlUnQ7kE/Pw
Q54JO778WDzNhOyeV/AKITYKHcEmjpw/f2Qtoig2Y5FEoOAlI+c2rE4i/sIJ84kD
cfuTD6DCxNEWwf9XCHS9Ee1bxCZNnI1od+CDk+B6dcIrW9fXytoZiUO5caaWDtmC
QfS7ok2m3ykkCTWdABnl+ix8nqu3KtOWGtAa/6rvprt4wzw2jP7r3Jno//qjiVVf
0K50+tSByIHvC1PdZHUiFavne1CefI2W+KOAdXh2fTi9Aa4z8/aq7gS8HTCngS4=
=fvTN
-----END PGP SIGNATURE-----

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ