Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 12 Apr 2011 11:49:38 -1000
From: akuster <akuster@...sta.com>
To: oss-security@...ts.openwall.com
Subject: Re: Closed list



On 04/11/2011 09:57 AM, Josh Bressers wrote:
> ----- Original Message -----
>>
>> Postponed. I'd like to see any support for you getting onto the Linux
>> distros security contacts list, with reasoning, or/and any other
>> suggestions on what to do in this case. Josh - what do you think (as
>> someone who advocated the setup of a vendor-sec replacement)?
>>
> 
> My initial thought is that a vendor without public advisories is a
> liability.

Making our Advisories public could put our customers' customers at risk
depending on when we publish and when our customers can get the fixes
into their customers hands and so on down the line.

- Armin

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.