[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 4 Feb 2014 09:48:38 -0500 (EST)
From: cve-assign@...re.org
To: vdanen@...hat.com
Cc: cve-assign@...re.org, oss-security@...ts.openwall.com
Subject: Re: CVE request and heads-up on insecure temp file handling in unpack200 (OpenJDK, Oracle Java)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> I'm not sure if MITRE will be handling the assignment or if Oracle
> will,
We don't want to rule out the possibility that someone from Oracle
will reply to the list and mention that this issue was the topic
of an earlier private report to Oracle, and already has a CVE ID
assigned. In general, MITRE will coordinate with Oracle to avoid a
duplicate assignment.
- --
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)
iQEcBAEBAgAGBQJS8Pz/AAoJEKllVAevmvms22kH/3seljXSIQBQc4RHGdXASiNp
iAuFo0RbOWUpASGKX0Roo0aL3XVJGiieffeOtmbV1D434tffB5cuCdlUnQ7kE/Pw
Q54JO778WDzNhOyeV/AKITYKHcEmjpw/f2Qtoig2Y5FEoOAlI+c2rE4i/sIJ84kD
cfuTD6DCxNEWwf9XCHS9Ee1bxCZNnI1od+CDk+B6dcIrW9fXytoZiUO5caaWDtmC
QfS7ok2m3ykkCTWdABnl+ix8nqu3KtOWGtAa/6rvprt4wzw2jP7r3Jno//qjiVVf
0K50+tSByIHvC1PdZHUiFavne1CefI2W+KOAdXh2fTi9Aa4z8/aq7gS8HTCngS4=
=fvTN
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
