Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 27 Feb 2012 09:32:40 -0700
From: Kurt Seifried <kseifried@...hat.com>
To: oss-security@...ts.openwall.com
CC: Jan Lieskovsky <jlieskov@...hat.com>,
        "Steven M. Christey" <coley@...us.mitre.org>,
        Mariusz Fik <fisiu@...nsuse.org>,
        RafaƂ Malinowski
 <rafal.przemyslaw.malinowski@...il.com>,
        Radoslaw Lisowski <radoslaw.lisowski@...il.com>
Subject: Re: CVE Status Clarification / Request -- kadu: Stored
 XSS by parsing contact's status and sms messages in history

On 02/27/2012 03:05 AM, Jan Lieskovsky wrote:
> Hello Mariusz, Kurt, Steve, vendors,
> 
>   [1] though https://bugzilla.novell.com/show_bug.cgi?id=749036#c0
>   mentions CVE identifier has been already requested for this:
> 
>   "The bug still doesn't have CVE number but will have in near future."

I can only assume they requested one directly from Mitre. Steve, is this
the case? If not I'll assign one.



-- 
Kurt Seifried Red Hat Security Response Team (SRT)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.