On Tue, Nov 25, 2014 at 03:43:21PM +0100, Michal Sekletar wrote: > On Tue, Nov 25, 2014 at 09:52:59AM +0100, Romain Francoise wrote: > > On Mon, Nov 24, 2014 at 11:26:06AM -0800, Michal Zalewski wrote: > > > I didn't request one, but probably. RH or Debian folks can likely just > > > assign one from their pools. > > > > I can ask the Debian security team to assign one, or we can ask > > cve-assign@mitre directly. Or perhaps the other Michal can get one via > > internal Red Hat channels? > > I will contact Red Hat SRT to look into that.
I got a response from a member of Red Hat's SRT stating that since the issue was already reported publicly they can not assign CVE number. If we want to request CVE number we should either write to oss-security list or ask MITRE directly. Michal > > Michal > > > > > -- > > Romain Francoise <rfranco...@debian.org> > > http://people.debian.org/~rfrancoise/ > _______________________________________________ > tcpdump-workers mailing list > tcpdump-workers@lists.tcpdump.org > https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers _______________________________________________ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers