[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <874mhidqhp.fsf@redhat.com>
Date: Fri, 23 Oct 2015 08:54:26 +0200
From: Martin Prpic <mprpic@...hat.com>
To: "oss-security\@lists.openwall.com" <oss-security@...ts.openwall.com>
Subject: Duplicate CVE: CVE-2015-7703 in NTP
Hi,
It seems that NTP upstream has also requested a CVE (and had one
assigned) for this issue:
Bug 2902 : CVE-2015-7703 configuration directives "pidfile" and "driftfile" should only be allowed locally. (RedHat)
[http://support.ntp.org/bin/view/Main/SecurityNotice#October_2015_NTP_Security_Vulner]
However, Red Hat assigned CVE-2015-5196 to this issue when it was first
discovered:
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-5196
Can CVE-2015-7703 please be rejected?
Thank you!
--
Martin Prpič / Red Hat Product Security
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
