oss-sec mailing list archives

CVE-2009-0161 dupe of CVE-2009-0642


From: Nico Golde <oss-security+ml () ngolde de>
Date: Tue, 26 May 2009 01:28:12 +0200

Hi,
looks like CVE-2009-0161 is a dupe of the original CVE id 
that already covered invalid return value checking of 
OCSP_basic_verify.

This is not the first time Apple products receive their own 
CVE id for issues in the underlying oss product (e.g. webkit 
very often). Is that on purpose or is that just because 
Apple is lacking to provide the proper information to notice 
that?

Cheers
Nico

-- 
Nico Golde - http://www.ngolde.de - nion () jabber ccc de - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.

Attachment: _bin
Description:


Current thread: