Mitre, reserved CVEs and oss-security?

[Paul Wise <pabs3 () bonedaddy net>]

Hi all,

I think it would be a good idea for Mitre to remove the RESERVED mark
from CVEs that have been released for use by people mailing issues to
the oss-security to get CVE numbers. The CVE database could then point
at the oss-security mailing list archives as a reference for the issue.

Any thoughts?

For example CVE-2016-2515 could refer to one of these posts:

http://www.openwall.com/lists/oss-security/2016/02/20/1
http://www.openwall.com/lists/oss-security/2016/02/20/2

-- 
bye,
pabs

http://bonedaddy.net/pabs3/

Attachment: signature.asc
Description: This is a digitally signed message part