Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Tue, 07 Jun 2016 09:34:51 +0200
From: Martin Prpic <mprpic@...hat.com>
To: "oss-security\@lists.openwall.com" <oss-security@...ts.openwall.com>
cc: "Mitre CVE assign department" <cve-assign@...re.org>
Subject: Please reject duplicate CVE for libxml2

Hi, it seems two CVEs were assigned for the same issue in libxml2:

http://seclists.org/oss-sec/2016/q1/683
http://seclists.org/oss-sec/2016/q2/214

Daniel Veillard reported to us that these issues are the same and fixed
by:

https://git.gnome.org/browse/libxml2/commit/?id=bdd66182ef53fe1f7209ab6535fda56366bd7ac9

The upstream bug is:

https://bugzilla.gnome.org/show_bug.cgi?id=762100

Can CVE-2016-4483 please be rejected as a duplicate of CVE-2016-3627?

Thank you!

-- 
Martin Prpič / Red Hat Product Security

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.