Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <20150422030952.B49A342E0C1@smtpvbsrv1.mitre.org>
Date: Tue, 21 Apr 2015 23:09:52 -0400 (EDT)
From: cve-assign@...re.org
To: kash@...pleback.net, team@...urity.debian.org
Cc: cve-assign@...re.org, oss-security@...ts.openwall.com
Subject: Re: CVE Request for ZFS on Linux

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> https://github.com/zfsonlinux/zfs/issues/3319

> -> These patches were included by the maintainer of the Debian packages
> against upstream's wishes

> it's a unique issue which has
> apparently been in the Debian packages for some time now.

> Can we have a CVE

Yes; however, because your message is apparently specific to Debian
and doesn't mention a Debian bug number, we would like to give the
Debian security team an opportunity to comment in case (for example)
someone reported the issue to them privately yesterday and they have
already done a CVE assignment.

- -- 
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)

iQEcBAEBAgAGBQJVNxChAAoJEKllVAevmvmsSSYIAIluIXO7wg3aUaBGrBnfa1Ig
81Q9Hj2wxhVTtlULwcusJ7k/4WdEemw2CXqtQ2EmL5fwQwjg6myzyYXZLiKxY1Wc
YOCJNrRSL1MM/AbTX3Vcnxo1JQCXxA43bZEPNTgwufG1tZuS9qEMgatW8Bmubatf
alRbsnwN8jRBiyLE+MRQttSFTbGpSX1LVbo8ahhGb9AcriU6T4xJjj9EjNTqivHf
dRO0fqVQgONRZfb5wdfJst9CtflxoXg8Q75dw7eKIK6QS83FehENhKPLarOYjvWV
AsHM4hqEgImj4fidH+UVRl53Uwzd95CJ80+p+9BmhK91gf+E9lZhabeCeytCA2s=
=rEht
-----END PGP SIGNATURE-----

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.