oss-security - Re: CVE request: Pidgin crash

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20110822164349.GB3746@pisco.westfalen.local>
Date: Mon, 22 Aug 2011 18:43:49 +0200
From: Moritz Mühlenhoff <jmm@...til.org>
To: oss-security@...ts.openwall.com
Cc: mark@...gant.net
Subject: Re: CVE request: Pidgin crash

On Mon, Aug 22, 2011 at 02:55:34AM -0400, Huzaifa Sidhpurwala wrote:
> Hi Mark,
> 
> >Hi!  Would it be possible to issue a CVE for a new crash in Pidgin?
> 
> >http://pidgin.im/news/security/?id=53
> 
> Please use CVE-2011-2942 for this issue.
> 
> Also looking at http://pidgin.im/news/security it seems two other security issues were also
> fixed in 2.10.0, do you want CVEs to be assigned for them as well?

Please do. Since they're published in the form of upstream advisories
we'd like to properly track them in the Debian Security Tracker.

Cheers,
        Moritz

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.