Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 11 Aug 2015 10:47:46 -0400 (EDT)
From: Siddharth Sharma <>
Subject: Re: Duplicate Wireshark CVEs?


Any information available on why both Wireshark CVEs
CVE-2015-3811 CVE-2015-2188 point to one fix ?

Siddharth Sharma / Red Hat Product Security / Key ID : 0xD9F6489A 
Fingerprint :  0x6F04C684 A49C E4CE 8148 E841 CD6F 8E55 D9F6 489A 

----- Original Message -----
From: "Martin Prpic" <>
Sent: Monday, August 10, 2015 4:15:31 PM
Subject: [oss-security] Duplicate Wireshark CVEs?


It looks like the following two Wireshark advisories fix the same flaw:

Both fix a flaw in the WCP dissector and refer to the following bug:

Is there a reason two CVEs were assigned for this, or should one of them
be rejected?


RH bugs:

Martin Prpič / Red Hat Product Security

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.