oss-security - Re: CVE Assignment (wireshark)

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <71871187.727261273239354364.JavaMail.root@zmail01.collab.prod.int.phx2.redhat.com>
Date: Fri, 7 May 2010 09:35:54 -0400 (EDT)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: coley <coley@...re.org>, Gerald Combs <gerald@...eshark.org>
Subject: Re: CVE Assignment (wireshark)


----- "Josh Bressers" <bressers@...hat.com> wrote:

> Wireshark just published two advisories
> 
> http://www.wireshark.org/security/wnpa-sec-2010-03.html
> http://www.wireshark.org/security/wnpa-sec-2010-04.html
> 
> I've assigned CVE ids:
> 
> CVE-2010-1455 wireshark wnpa-sec-2010-03
> CVE-2010-1456 wireshark wnpa-sec-2010-04
> 

It's been pointed out to me that these are the same thing, and should only
use one ID.

Let's use CVE-2010-1456 as the dupe then. Please do not reference
CVE-2010-1456 in any advisories.

Only use CVE-2010-1455.

Sorry for the confusion.

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.