3 ms·
But can we still have the CV numbers as well please. "The security community refers to vulnerabilities by numbers, not names. This does have some advantages,
by keithpeter 13y ago
But can we still have the CV numbers as well please.
"The security community refers to vulnerabilities by numbers, not names. This does have some advantages, like precision and the ability to Google them and get meaningful results all of the time"
I wish everyone embedded a Dewey Decimal number into their factual pages. Would be ace.
"I saw some kvetching on Twitter to the effect that the logo designer heard about Heartbleed before the distribution maintainers at e.g. Ubuntu and RedHat did."
Updates for Debian and CentOS landed within hours. Would have been nice to have them as we read the page.
Interestingly nothing (apparent) for Manjaro yet. Manjaro is a staged version of Arch which I have installed on a test machine to sample Gnome 3.12 when it lands in the repository a week or so.
[keith@mocha ~]$ openssl version
OpenSSL 1.0.1f 6 Jan 2014
Sort of ties in with
http://allanmcrae.com/2013/01/manjaro-linux-ignoring-security-for-stability/ http://allanmcrae.com/2013/01/manjaro-linux-ignoring-securit...
perhaps. I get the impression that Manjaro (and other similar client OSes) are mainly for end users and not on servers.
- aembleton 13y agoThe CV number is on http://heartbleed.com/ http://heartbleed.com/ CVE-2014-0160 is the official reference to this bug. CVE (Common Vulnerabilities and Exposures) is the Standard for Information Security Vulnerability Names maintained by MITRE. Due to co-incident discovery a duplicate CVE, CVE-2014-0346, which was assigned to us, should not be used, since others independently went public with the CVE-2014-0160 identifier.
- keithpeter 13y agoReplying to my own comment as edit time has passed. Manjaro: update arrived this morning, may have been available for past 12 hours, so promoted through the 'staging' cycle. Half a day to a day later than Ubuntu/Debian/Redhat if I have my times correct. [keith@mocha ~]$ openssl version OpenSSL 1.0.1g 7 Apr 2014