oss-security - CVE Clarification: Mysqlnd / CVE-2015-3152

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20160331201936.GA25397@hunt>
Date: Thu, 31 Mar 2016 13:19:36 -0700
From: Seth Arnold <seth.arnold@...onical.com>
To: cve-assign@...re.org, oss-security@...ts.openwall.com
Subject: CVE Clarification: Mysqlnd / CVE-2015-3152

Hello MITRE, all,

Tomas Hoger asked if CVE-2015-3152 is appropriate for re-use with the php
mysqlnd interface:
https://marc.info/?l=oss-security&m=143750829604598
http://www.openwall.com/lists/oss-security/2015/07/21/7
Message-ID: <20150721215101.5b7c0a96@...hat.com>

This association is already made at e.g.:
https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1564388

I never saw a response to his question.

Can we re-use this CVE for the different codbase? If not, can one please
be assigned?

Thanks


Download attachment "signature.asc" of type "application/pgp-signature" (474 bytes)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.