oss-sec mailing list archives
Re: CVE Help (CVE request for mysql bug #22413)
From: Josh Bressers <bressers () redhat com>
Date: Thu, 21 Feb 2008 17:12:15 -0500
Jamie Strandboge wrote: | We have a bug report open to fix http://bugs.mysql.com/bug.php?id=22413. | This is a DoS via a 'EXPLAIN SELECT FROM view with ORDER BY' statement | and is fixed in 5.0.32. Can a CVE be assigned for this? You'll probably want to CC Steve on such emails... I don't think he's actually subscribed to the list (Steve, feel free to correct me if I'm wrong here... I assumed it would be the same as vendor-sec).
Steve, I think this is a good opportunity to ask you how we can use this list to make your life easier. Perhaps it's worth thinking about ways some of the subscribed CNAs can dish out CVE ids to reduce your load a little bit for these public issues that obviously lack a proper id. Thanks. -- JB
Current thread:
- CVE request for mysql bug #22413 Jamie Strandboge (Feb 21)
- Re: CVE request for mysql bug #22413 Jonathan Smith (Feb 21)
- Re: CVE Help (CVE request for mysql bug #22413) Josh Bressers (Feb 21)
- Re: CVE Help Solar Designer (Feb 22)
- Re: CVE Help (CVE request for mysql bug #22413) Steven M. Christey (Feb 25)
- Re: CVE request for mysql bug #22413 Steven M. Christey (Feb 26)
- Re: CVE Help (CVE request for mysql bug #22413) Josh Bressers (Feb 21)
- Re: CVE request for mysql bug #22413 Jonathan Smith (Feb 21)