[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <CAOtvbJxHNtmbxdLxAaeq7BEvVbqqKyAi-mB7x2QZOJ5x8dM5_A@mail.gmail.com>
Date: Tue, 28 Feb 2012 10:57:35 +0100
From: Rafał Malinowski <rafal.przemyslaw.malinowski@...il.com>
To: Kurt Seifried <kseifried@...hat.com>
Cc: oss-security@...ts.openwall.com, Jan Lieskovsky <jlieskov@...hat.com>,
"Steven M. Christey" <coley@...us.mitre.org>, Mariusz Fik <fisiu@...nsuse.org>,
Radoslaw Lisowski <radoslaw.lisowski@...il.com>
Subject: Re: CVE Status Clarification / Request -- kadu: Stored
XSS by parsing contact's status and sms messages in history
2012/2/27 Kurt Seifried <kseifried@...hat.com>:
> On 02/27/2012 03:05 AM, Jan Lieskovsky wrote:
>> Hello Mariusz, Kurt, Steve, vendors,
>>
>> [1] though https://bugzilla.novell.com/show_bug.cgi?id=749036#c0
>> mentions CVE identifier has been already requested for this:
>>
>> "The bug still doesn't have CVE number but will have in near future."
>
> I can only assume they requested one directly from Mitre. Steve, is this
> the case? If not I'll assign one.
We haven't requested CVE number yet. Could you do that for this issue?
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
