Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun, 04 Jan 2015 09:53:26 -0800
From: Alan Coopersmith <alan.coopersmith@...cle.com>
To: oss-security@...ts.openwall.com
CC: gremlin@...mlin.ru
Subject: Re: CVE Request for illumos distributions

On 01/ 3/15 10:26 PM, gremlin@...mlin.ru wrote:
> On 2015-01-04 15:06:51 +1100, Dave Horsfall wrote:
>
>   >> | Use CVE-2014-9491.
>   >> Shouldn't we be using CVE-2015-XXXX by now?
>   > I'd rather see CVE-2015-XXXXX - look how close we came...
>   > Is there a CVE for that?
>
> First CVE ID in 2015 is CVE-2015-0001; once we get to CVE-2015-9999,
> the next ID will be CVE-2015-10000.

Except that https://cve.mitre.org/cve/identifiers/syntaxchange.html
says they won't wait that long, and will issue a 5 digit CVE ID in
the next couple of weeks.

(Even without that, CVE ID's aren't strictly issued in order, as blocks
  of id's go out to each numbering authority for them to assign as needed.)

-- 
	-Alan Coopersmith-              alan.coopersmith@...cle.com
	 Oracle Solaris Engineering - http://blogs.oracle.com/alanc

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.