[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <Pine.LNX.4.64.1501041734580.3184@beijing.mitre.org>
Date: Sun, 4 Jan 2015 17:36:13 -0500 (EST)
From: "Steven M. Christey" <coley@...re.org>
To: oss-security@...ts.openwall.com
Subject: Re: CVE Request for illumos distributions
On Sun, 4 Jan 2015, gremlin@...mlin.ru wrote:
> On 2015-01-04 15:06:51 +1100, Dave Horsfall wrote:
>
> >> | Use CVE-2014-9491.
> >> Shouldn't we be using CVE-2015-XXXX by now?
> > I'd rather see CVE-2015-XXXXX - look how close we came...
> > Is there a CVE for that?
>
> First CVE ID in 2015 is CVE-2015-0001; once we get to CVE-2015-9999,
> the next ID will be CVE-2015-10000.
>
> Consider it as "CVE-%u-%04u".
People who consider the ID format as "CVE-%u-%04u" might not comply with
all the example IDs provided in CVE test data, as made available to the
public for almost a year at
http://cve.mitre.org/cve/identifiers/syntaxchange.html#guidance
- Steve
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
