[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <521EE6E5.6000403@gentoo.org>
Date: Thu, 29 Aug 2013 10:15:01 +0400
From: Sergey Popov <pinkbyte@...too.org>
To: oss-security@...ts.openwall.com
Subject: Re: CVE oops in GLSA 201308-05 (wireshark)
28.08.2013 19:24, Vincent Danen пишет:
> I just saw via a Gentoo bug report that their GLSA 201308-05 advisory
> mentioned some CVEs as related to wireshark that were incorrect.
>
> Instead of mentioning CVE-2013-{3560,3561,3562} they mentioned
> CVE-2013-{3540,3541,3542}. I checked on MITRE's site and those three
> are still reserved.
>
> I don't know who those three (354[012]) are assigned to, but you might
> want to see if they've been used already or not and dupe them against
> 356[012] if they have not.
>
> See:
>
> http://www.net-security.org/advisory.php?id=16517
> https://bugs.gentoo.org/show_bug.cgi?id=482794
>
> Thanks.
>
That was my mistake and i am truly sorry about it. Our GLSA will be
fixed soon, but i can not undo sent mail to gentoo-announce@ :-(
--
Best regards, Sergey Popov
Gentoo developer
Gentoo Desktop Effects project lead
Gentoo Qt project lead
Gentoo Proxy maintainers project lead
Download attachment "signature.asc" of type "application/pgp-signature" (556 bytes)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
