Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Tue, 3 May 2016 17:07:20 +0200
From: Max Teufel <max@...felsnetz.com>
To: cve-assign@...re.org
Cc: oss-security@...ts.openwall.com
Subject: Re: CVE request: atheme: security fixes

Hi,

> Use CVE-2014-9773. We don't completely understand issues/397. We think
> "This is rejected for Atheme, please consider reporting it to a
> downstream fork instead" means that the vulnerability report was
> originally rejected, but that decision was reconsidered many months
> later.
Indeed, this issue was rejected when development of Atheme was
(temporarily) discontinued. However, after development was resumed, this
decision was reconsidered.

Regards,
Max Teufel

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.