oss-sec mailing list archives

Re: Pending CVE assignments for SA-CORE-2014-006?

From: Gunnar Wolf <gwolf () gwolf org>
Date: Thu, 20 Nov 2014 07:14:50 -0600

Salvatore Bonaccorso dijo [Thu, Nov 20, 2014 at 07:10:28AM +0100]:

Hi

I just wanted to ask back if the CVEs for SA-CORE-2014-006[1] were
already requested (the advisory mention that they will be requested
and added to the advisory). If so this will ease tracking the two
issues. For reference they are:


The Drupal advisory page for this release¹ mentions only that "A CVE
identifier will be requested, and added upon issuance, in accordance
with Drupal Security Team processes".

¹ https://www.drupal.org/SA-CORE-2014-006

Current thread:

Pending CVE assignments for SA-CORE-2014-006? Salvatore Bonaccorso (Nov 19)
- Re: Pending CVE assignments for SA-CORE-2014-006? Gunnar Wolf (Nov 20)
- Re: Pending CVE assignments for SA-CORE-2014-006? cve-assign (Nov 20)
  - Re: [security] Pending CVE assignments for SA-CORE-2014-006? Peter Wolanin (Nov 20)
    - Re: [security] Pending CVE assignments for SA-CORE-2014-006? cve-assign (Nov 20)