|
|
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Multipel CNAs for software and coordination for issues under embargo
- To: Kurt Seifried <kseifried@redhat.com>, cve-editorial-board-list <cve-editorial-board-list@LISTS.MITRE.ORG>
- Subject: Re: Multipel CNAs for software and coordination for issues under embargo
- From: Art Manion <amanion@cert.org>
- Date: Fri, 16 Feb 2018 16:53:42 -0500
- Authentication-results: spf=none (sender IP is 192.52.194.235) smtp.mailfrom=LISTS.MITRE.ORG; imc.mitre.org; dkim=none (message not signed) header.d=none;imc.mitre.org; dmarc=fail action=none header.from=cert.org;
- Cc: Common Vulnerabilities & Exposures <cve@mitre.org>
- Delivery-date: Mon Feb 19 08:06:46 2018
- Dkim-filter: OpenDKIM Filter v2.11.0 veto.sei.cmu.edu w1GLrh8U043997
- In-reply-to: <CANO=Ty01ZBGszW9BvFK-pP06F1f6=u3ThAw8=g-Mcg3wHRNKCQ@mail.gmail.com>
- List-help: <mailto:LISTSERV@LISTS.MITRE.ORG?body=INFO%20CVE-EDITORIAL-BOARD-LIST>
- List-owner: <mailto:CVE-EDITORIAL-BOARD-LIST-request@LISTS.MITRE.ORG>
- List-subscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-subscribe-request@LISTS.MITRE.ORG>
- List-unsubscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-unsubscribe-request@LISTS.MITRE.ORG>
- References: <CANO=Ty01ZBGszW9BvFK-pP06F1f6=u3ThAw8=g-Mcg3wHRNKCQ@mail.gmail.com>
- Sender: <owner-cve-editorial-board-list@lists.mitre.org>
- Spamdiagnosticmetadata: 5952c28dcc454f0789fb433d26f936ef
- Spamdiagnosticoutput: 1:2
- User-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.6.0
On 2/15/18 6:36 PM, Kurt Seifried wrote:
So we now have a failure case, an embargoed set of issues were posted to the distros list, I was not explicitly asked to assign CVE's, but did, and it turns out CERT also assigned CVEs. CERT published first, so I reject'ed mine (https://github.com/CVEProject/cvelist/pull/314).
CERT/CC will be submitting entries this evening, sorry for the timing. https://www.debian.org/security/2018/dsa-4115 http://savannah.nongnu.org/forum/forum.php?forum_id=9095 - Art
- References:
- Multipel CNAs for software and coordination for issues under embargo
- From: Kurt Seifried <kseifried@redhat.com>
- Multipel CNAs for software and coordination for issues under embargo
- Prev by Date: Re: Multipel CNAs for software and coordination for issues under embargo
- Next by Date: Re: Multipel CNAs for software and coordination for issues under embargo
- Previous by thread: Re: Multipel CNAs for software and coordination for issues under embargo
- Next by thread: XKCD "2018 CVE list"
- Index(es):