Comment 14 for bug 585274

Revision history for this message
Matt Giuca (mgiuca) wrote :

Hi. I'm not familiar with the security procedures, but I wanted to check what's happening with this bug. There was a suggested CRD of 2010-06-16 (two days ago), and on the mailing list it was assigned a CVE number. As far as I can tell, nothing happened and the patch doesn't seem to have been reviewed.

I haven't dealt with a security vulnerability before, so I don't know if this is unusual or not.

Also, should the Launchpad bug report be linked to the CVE given on the mailing list, or is that only after the bug is disclosed?