[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <Pine.GSO.4.51.0910131232390.11167@faron.mitre.org>
Date: Tue, 13 Oct 2009 12:33:37 -0400 (EDT)
From: "Steven M. Christey" <coley@...us.mitre.org>
To: oss-security <oss-security@...ts.openwall.com>
cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: Duplicate CVE assignment notification [was: CVE
id request: django]
On Tue, 13 Oct 2009, Jan Lieskovsky wrote:
> two CVE ids have been assigned for this issue:
>
> CVE-2009-3695 and CVE-2009-3610.
>
> Will take CVE-2009-3695 as the proper one, as it has description already.
> CVE-2009-3610 should be rejected.
I agree with this: keep CVE-2009-3695.
CVE-2009-3695 was created off a Debian advisory that didn't list a CVE.
I assume that CVE-2009-3610 was being used for pre-disclosure coordination
by the Red Hat CNA.
- Steve
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
