Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sat, 8 Jan 2011 20:58:30 -0600
From: Hyrum K Wright <>
To: Josh Bressers <>
Cc:, Kurt Seifried <>, 
	"Steven M. Christey" <>, Joe Orton <>, 
	Subversion Development <>
Subject: Re: CVE request for subversion

On Wed, Jan 5, 2011 at 10:09 AM, Josh Bressers <> wrote:
> OK, let's split the CVE id then.
> So for
> A, "* prevent crash in mod_dav_svn when using SVNParentPath (r1033166)"
>  Upstream changeset:
> Let's use CVE-2010-4539.
> For
> B, * fix server-side memory leaks triggered by 'blame -g' (r1032808)
>   References:
>   Upstream changeset:
> Let's use CVE-2010-4644.

Sounds great.

Should the Subversion project plan to write and publish advisories for
these CVEs, or has the requester already done so?


Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.