Hacker News new | ask | show | jobs
by jwilk 3266 days ago
> CVE-2017-1000082

This was discussed here: http://www.openwall.com/lists/oss-security/2017/07/02/1

> a rare example of a real problem that was assigned a CVE number by request of someone other than the developer

It's fairly common that the security researcher requests CVE. CVE request by an affected distro (which is what happened here) isn't anything unusual either.
1 comments
JdeBP 3266 days ago
It was discussed a whole lot more in these places:

* https://github.com/systemd/systemd/pull/6300

* https://github.com/systemd/systemd/issues/6277 (https://news.ycombinator.com/item?id=14681377)

* https://lists.freedesktop.org/archives/systemd-devel/2017-Ju...

* https://news.ycombinator.com/item?id=14682210

link