oss-security - Re: CVE Help (CVE request for mysql bug #22413)

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu, 21 Feb 2008 17:12:15 -0500
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: CVE Help (CVE request for mysql bug #22413)

> 
> Jamie Strandboge wrote:
> | We have a bug report open to fix http://bugs.mysql.com/bug.php?id=22413.
> | This is a DoS via a 'EXPLAIN SELECT FROM view with ORDER BY' statement
> | and is fixed in 5.0.32. Can a CVE be assigned for this?
> 
> You'll probably want to CC Steve on such emails... I don't think he's
> actually subscribed to the list (Steve, feel free to correct me if I'm
> wrong here... I assumed it would be the same as vendor-sec).
> 

Steve,

I think this is a good opportunity to ask you how we can use this list to
make your life easier.  Perhaps it's worth thinking about ways some of the
subscribed CNAs can dish out CVE ids to reduce your load a little bit for
these public issues that obviously lack a proper id.

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.