Date: Fri, 31 Aug 2012 13:00:01 -0400 (EDT) From: "Steven M. Christey" <coley@...-smtp.mitre.org> To: oss-security@...ts.openwall.com cc: Moritz Muehlenhoff <jmm@...ian.org> Subject: Re: Three CVE requests: at-spi2-atk, as31, naxsi On Fri, 6 Jul 2012, Kurt Seifried wrote: >> 2. Insecure tempfile handling in the as31 assembler >> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=655496 Homepage: >> http://wiki.erazor-zone.de/doku.php?id=wiki:projects:linux:as31 > > Please use CVE-2012-3379 for this issue. This is a duplicate of CVE-2012-0808, assigned back in January (and also requested by Moritz ;-) CVE-2012-0808 has 20,000+ Google hits, has an established description, was assigned earlier, and has the same level of authoritative vendor references (i.e. bug reports). So, we will keep it. So, REJECT CVE-2012-3379 as a duplicate of CVE-2012-0808. - Steve
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.