[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 18 Dec 2013 14:43:30 -0500 (EST)
From: cve-assign@...re.org
To: secalert@...hat.com
Cc: cve-assign@...re.org, oss-security@...ts.openwall.com
Subject: CVE already assigned for 1026891?
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
http://www.openwall.com/lists/oss-security/2013/12/18/3 raises the
question of whether there is a CVE assignment in
https://bugzilla.redhat.com/show_bug.cgi?id=1026891 already, in order
to avoid a duplicate assignment. Our guess is that security issues
tracked privately by Red Hat typically do have pre-assigned CVE IDs,
so MITRE will delay a CVE assignment indefinitely.
Although it would be great to know what CVE ID you have assigned,
replying with something like "yes, it has a CVE ID, but it's only
being shared with the embargo audience" would be quite useful as well.
- --
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)
iQEcBAEBAgAGBQJSsfpLAAoJEKllVAevmvms85IH/1IZY31z4BA1n/wz1iIxd4H+
9Sv6E3ZExTIfpgHuLgMqFvnX6yaejW2M+MACgslQ4EWa00+zI1on9LIukeYCBfTo
wi1RLWSpwT3eGGfqd++Z+LrVxMtLCVRO9J20ntxJCe8GEU6YSkkkfbai48YeFE2P
4oTiIaLAjJx0BGQxYxDn2y6tj+U/bQBObAgVIJXwo4yofmk8R+RS/ZvGX+zvI9uO
fnywBOgcYfJ0opD1eDqZ9/clsc8TJuSHHuDQD0POqjA/6Ssx6ZxHj9D9msP3Gdgz
4TU1eUNwutQu2lsbZgX0/Lkj8J87snNghYxQlNVZ1jD/2rn2EYuxbNjlfJ2Di1M=
=iZA7
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
