4 ms·

> CVE-2017-1000082 This was discussed here: http://www.openwall.com/lists/oss-security/2017/07/02/1 http://www.openwall.com/lists/oss-security/2017/07/02/1 >

by jwilk 9y ago

> CVE-2017-1000082 This was discussed here: http://www.openwall.com/lists/oss-security/2017/07/02/1 http://www.openwall.com/lists/oss-security/2017/07/02/1 > a rare example of a real problem that was assigned a CVE number by request of someone other than the developer It's fairly common that the security researcher requests CVE. CVE request by an affected distro (which is what happened here) isn't anything unusual either.

JdeBP 9y ago
It was discussed a whole lot more in these places: * https://github.com/systemd/systemd/pull/6300 https://github.com/systemd/systemd/pull/6300 * https://github.com/systemd/systemd/issues/6277 https://github.com/systemd/systemd/issues/6277 (https://news.ycombinator.com/item?id=14681377 https://news.ycombinator.com/item?id=14681377) * https://lists.freedesktop.org/archives/systemd-devel/2017-July/thread.html#39154 https://lists.freedesktop.org/archives/systemd-devel/2017-Ju... * https://news.ycombinator.com/item?id=14682210 https://news.ycombinator.com/item?id=14682210