Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 15 Oct 2013 12:04:43 -0600
From: Kurt Seifried <kseifried@...hat.com>
To: oss-security@...ts.openwall.com
CC: sebi@...ecware.net, j.wielicki@...ecware.net
Subject: Re: CVE request: pyxtrlock

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/15/2013 07:14 AM, Leon Weber wrote:
> Hi,
> 
> On 25.09.2013 21:28:46, Leon Weber wrote:
>> two security issues were found and fixed in pyxtrlock[1], a
>> lightweight X screen locker.
> 
> Do you think this isn't CVE worthy, or was the request just lost
> between other work? :-)
> 
> -- Leon.
> 

Sorry, meant to reply, forgot. This was the one where I was wondering
how many people us it. Debian doesn't ship it, nor does Red Hat,
Fedora. When I searched it in Google it tries to correct me to
"xtrlock", and for the term I get 644 results, so I'm thinking this
falls into the "not enough people use it to make a CVE worthwhile"
category, is that correct, or is there a large user pool/other factors
 I'm unaware of?

- -- 
Kurt Seifried Red Hat Security Response Team (SRT)
PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)
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=LBVC
-----END PGP SIGNATURE-----

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.