[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 5 Apr 2021 20:55:59 +0300
From: Henri Salo <henri@...v.fi>
To: Leo Famulari <leo@...ulari.name>
Cc: oss-security@...ts.openwall.com
Subject: Re: Risk of local privilege escalation in GNU Guix
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
On Mon, Apr 05, 2021 at 12:43:15PM -0400, Leo Famulari wrote:
> We applied for a CVE ID via MITRE's web form [0] on March 18, 2021.
> We have not yet received a reply. Does anybody know if that is expected?
This is not normal. Please send inquiry to cve-request@...re.org and
cve@...re.org. Include the request ID that you received after submitting CVE
request. Spam filtering or something might be involved in this case. Feel free
to contact me off list if you need help. It usually takes 1-2 days to get CVEs
via cveform.
- --
Henri Salo
-----BEGIN PGP SIGNATURE-----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=lR+P
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
