[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun, 04 Jan 2015 09:53:26 -0800
From: Alan Coopersmith <alan.coopersmith@...cle.com>
To: oss-security@...ts.openwall.com
CC: gremlin@...mlin.ru
Subject: Re: CVE Request for illumos distributions
On 01/ 3/15 10:26 PM, gremlin@...mlin.ru wrote:
> On 2015-01-04 15:06:51 +1100, Dave Horsfall wrote:
>
> >> | Use CVE-2014-9491.
> >> Shouldn't we be using CVE-2015-XXXX by now?
> > I'd rather see CVE-2015-XXXXX - look how close we came...
> > Is there a CVE for that?
>
> First CVE ID in 2015 is CVE-2015-0001; once we get to CVE-2015-9999,
> the next ID will be CVE-2015-10000.
Except that https://cve.mitre.org/cve/identifiers/syntaxchange.html
says they won't wait that long, and will issue a 5 digit CVE ID in
the next couple of weeks.
(Even without that, CVE ID's aren't strictly issued in order, as blocks
of id's go out to each numbering authority for them to assign as needed.)
--
-Alan Coopersmith- alan.coopersmith@...cle.com
Oracle Solaris Engineering - http://blogs.oracle.com/alanc
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
