oss-sec mailing list archives

Re: CVE id request: silc-toolkit


From: "Steven M. Christey" <coley () linus mitre org>
Date: Fri, 11 Sep 2009 08:20:15 -0400 (EDT)


On Fri, 11 Sep 2009, Tomas Hoger wrote:

On Thu, 3 Sep 2009 12:45:46 -0400 (EDT) "Steven M. Christey"
<coley () linus mitre org> wrote:

Use CVE-2009-3051 for both of these format strings, to be filled in
later.

Looks like this actually got split to two after all...

CVE-2009-3051:

Sorry for forgetting to tell everyone about this.  One of our CVE analysts
did some deeper investigation and noticed that there was a clear break in
affected versions, so we decided that a split was reasonable.  This
distinction wasn't immediately obvious to me when processing the initial
ID request.

- Steve


Current thread: