Date: Sun, 04 Jan 2015 09:53:26 -0800 From: Alan Coopersmith <alan.coopersmith@...cle.com> To: oss-security@...ts.openwall.com CC: gremlin@...mlin.ru Subject: Re: CVE Request for illumos distributions On 01/ 3/15 10:26 PM, gremlin@...mlin.ru wrote: > On 2015-01-04 15:06:51 +1100, Dave Horsfall wrote: > > >> | Use CVE-2014-9491. > >> Shouldn't we be using CVE-2015-XXXX by now? > > I'd rather see CVE-2015-XXXXX - look how close we came... > > Is there a CVE for that? > > First CVE ID in 2015 is CVE-2015-0001; once we get to CVE-2015-9999, > the next ID will be CVE-2015-10000. Except that https://cve.mitre.org/cve/identifiers/syntaxchange.html says they won't wait that long, and will issue a 5 digit CVE ID in the next couple of weeks. (Even without that, CVE ID's aren't strictly issued in order, as blocks of id's go out to each numbering authority for them to assign as needed.) -- -Alan Coopersmith- alan.coopersmith@...cle.com Oracle Solaris Engineering - http://blogs.oracle.com/alanc
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.