oss-security - Re: CVE-2015-5257 - Weak Randomization of BridgeSecret for Apache Cordova Android

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20151122175003.GA13876@eldamar.local>
Date: Sun, 22 Nov 2015 18:50:03 +0100
From: Salvatore Bonaccorso <carnil@...ian.org>
To: oss-security@...ts.openwall.com,
	CVE Assignments MITRE <cve-assign@...re.org>
Cc: DAVIDKA@...ibm.com, Roee Hay <ROEEH@...ibm.com>,
	"private@...dova.apache.org" <private@...dova.apache.org>,
	dev <dev@...dova.apache.org>,
	"security@...che.org" <security@...che.org>,
	bugtraq@...urityfocus.com
Subject: Re: CVE-2015-5257 - Weak Randomization of
 BridgeSecret for Apache Cordova Android

Hi,

Adding MITRE team to recipients.

On Fri, Nov 20, 2015 at 11:39:56AM -0800, Joe Bowser wrote:
> ===================================================================
> CVE-2015-5257: Weak Randomization of BridgeSecret for Apache Cordova Android

Is there a typo here? CVE-2015-5257 was already assigned for an issue
in drivers/usb/serial/whiteheat.c in the Linux kernel. see
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5257

Regards,
Salvatore

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.