oss-sec mailing list archives

Re: Duplicate CVE assignment notification [was: CVE id request: django]

From: "Steven M. Christey" <coley () linus mitre org>
Date: Tue, 13 Oct 2009 12:33:37 -0400 (EDT)


On Tue, 13 Oct 2009, Jan Lieskovsky wrote:

   two CVE ids have been assigned for this issue:

CVE-2009-3695 and CVE-2009-3610.

Will take CVE-2009-3695 as the proper one, as it has description already.
CVE-2009-3610 should be rejected.


I agree with this: keep CVE-2009-3695.

CVE-2009-3695 was created off a Debian advisory that didn't list a CVE.
I assume that CVE-2009-3610 was being used for pre-disclosure coordination
by the Red Hat CNA.

- Steve

Current thread:

CVE id request: django Raphael Geissert (Oct 10)
- Re: CVE id request: django Josh Bressers (Oct 12)
  - Re: Duplicate CVE assignment notification [was: CVE id request: django] Jan Lieskovsky (Oct 13)
    - Re: Duplicate CVE assignment notification [was: CVE id request: django] Steven M. Christey (Oct 13)
    - Re: Duplicate CVE assignment notification [was: CVE id request: django] Steven M. Christey (Oct 13)