Date: Tue, 17 May 2011 11:58:29 +0200 From: Tomas Hoger <thoger@...hat.com> To: oss-security@...ts.openwall.com Subject: Re: Closed list On Sat, 30 Apr 2011 19:26:14 +0400 Solar Designer wrote: > > We were members of vendor-sec as Sun Microsystems team, and now > > represent all of Oracle software and hardware products including but > > not limited to Oracle Enterprise Linux, Solaris, Java, MySQL and > > Open Office. > > Of these, only Oracle Enterprise Linux may qualify you for the list > that has been setup so far. As you say, Oracle got onto vendor-sec > through the acquisition of Sun. Although formally this satisfies > "must be a vendor-sec member" for the initial seed membership of the > new list, it does feel like a bypass of the intent of this > requirement. Oracle was never actually accepted to vendor-sec for > Oracle Enterprise Linux. IIRC, Oracle was subscribed to v-s more than once - the "Sun" exploder that was subscribed for quite a while (originally as Solaris vendor probably), and individual OEL representative, added around the time Oracle was in the process of acquiring Sun and there was no single security contact for all products yet. -- Tomas Hoger / Red Hat Security Response Team
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.