Re: The CVE-10K Problem

["Steven M. Christey" <coley@rcf-smtp.mitre.org>]

On Mon, 15 Jan 2007, Mark J Cox wrote:

> Red Hat itself moved from 3 digit to 4 digit advisory identifiers at the
> start of 2006 (we added several new products and we share identifiers
> between security and non-security updates).

I forgot to bring this up in my original message.  What problems, if any,
did Red Hat consumers encounter with this change?

Given that there were relatively few complaints with our change from CANs
to CVEs, maybe the upcoming CVE-10K change would not be too problematic
either.

- Steve