Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 5 Mar 2014 16:36:17 -0500 (EST)
From: cve-assign@...re.org
To: carnil@...ian.org
Cc: cve-assign@...re.org, oss-security@...ts.openwall.com
Subject: Re: CVE Request: file: crashes when checking softmagic for some corrupt PE executables

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> One question about the CVE ID, as the bug was submitted on 2013-12-20
> should that have recieved a 2013 CVE?

The year portion of a CVE ID is typically for when the issue is
first publicly identified as a security problem, not when the issue is
first reported in a possibly different context.

- -- 
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)

iQEcBAEBAgAGBQJTF5gVAAoJEKllVAevmvmswDUH/2s8Jjn1dIwTdT1YAMVI5OLt
hTox7n32EWIqIELqm0iTVgxXUknDZfXfIOUFxMQSN+1Ib55Aa8WSkJB75Sh1LLPq
zaKLX+PeE/wWOJOjgXCwLKVQkWCrJBDEtp4gRF74Ob9YsUvBvaIdYN31IG/cs1Dk
LY/3r3XOrAwGmo46kKfycBTp2wBEPfDlCzFq4jtvOXxGozJuaA+uxp5tfOEHRZvk
KY6VIyxtJqeRge0NPPU5shSEgmJUI1viRfEEtGtl+R9YIyBGfUiyCiBV+bLnZCs2
f0FjEbEhm7esQ2oJPEpq5qiz2zTPbz+qQX6HyVTnS/ZgdwQXV0mO9To3kqRS2w0=
=N7n/
-----END PGP SIGNATURE-----

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.