Re: CVE Request for illumos distributions

[Alan Coopersmith <alan.coopersmith () oracle com>]

On 01/ 3/15 10:26 PM, gremlin () gremlin ru wrote:
> On 2015-01-04 15:06:51 +1100, Dave Horsfall wrote:
>
>   >> | Use CVE-2014-9491.
>   >> Shouldn't we be using CVE-2015-XXXX by now?
>   > I'd rather see CVE-2015-XXXXX - look how close we came...
>   > Is there a CVE for that?
>
> First CVE ID in 2015 is CVE-2015-0001; once we get to CVE-2015-9999,
> the next ID will be CVE-2015-10000.

Except that https://cve.mitre.org/cve/identifiers/syntaxchange.html
says they won't wait that long, and will issue a 5 digit CVE ID in
the next couple of weeks.

(Even without that, CVE ID's aren't strictly issued in order, as blocks
 of id's go out to each numbering authority for them to assign as needed.)

--
        -Alan Coopersmith-              alan.coopersmith () oracle com
         Oracle Solaris Engineering - http://blogs.oracle.com/alanc