Date: Thu, 23 Apr 2015 03:04:23 +0300 From: Solar Designer <solar@...nwall.com> To: oss-security@...ts.openwall.com Subject: Re: USBCreator D-Bus service Hi Tavis, On Wed, Apr 22, 2015 at 04:50:08PM -0700, Tavis Ormandy wrote: > [as-per previous discussion on the vendors list, skipping closed > discussion of low-severity issue] What "vendors list" do you mean? Do you possibly mean "vendor's" rather than "vendors" - that is, upstream's list? (I do not recall seeing this on the linux-distros list.) Either way, it sounds weird to keep a low severity issue private. Low severity usually means not needing an embargo in the first place. But I guess it was the vendor's preference? Thanks, Alexander
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Powered by Openwall GNU/*/Linux - Powered by OpenVZ