Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 3 Jun 2008 18:08:59 -0400 (EDT)
From: "Steven M. Christey" <>
Subject: Re: tool announcements

On Tue, 3 Jun 2008, Pierre-Yves Rofes wrote:

> Looking at the archives, at least half of the topics are CVE requests,
> so maybe we should think about renaming the list "oss-CVEreq" :)

Until oss-security, these CVE requests were typically made either by one
distro and included in their bug report, or through vendor-sec even if the
issue was technically public.  When we assigned the CVE, it would often
become the first place where the issue was more widely announced.
Amongst the other benefits of this list, I think it provides a function
for wider, quicker dissemination of these types of issues.  The CVE
requests just happen to be part of the coordination function that the
distros used to perform in less visible ways.

- Steve

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.