[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 29 Jul 2013 14:57:38 -0600
From: Kurt Seifried <kseifried@...hat.com>
To: oss-security@...ts.openwall.com
CC: Tomas Hoger <thoger@...hat.com>, security-officer@...eBSD.org
Subject: Re: FreeBSD Security Advisory FreeBSD-SA-13:07.bind
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 07/29/2013 02:45 PM, Tomas Hoger wrote:
> Hi!
>
> On Sat, 27 Jul 2013 03:41:28 GMT FreeBSD Security Advisories
> wrote:
>
>> FreeBSD-SA-13:07.bind Security
>> Advisory The FreeBSD Project
>>
>> Topic: BIND remote denial of service
>>
>> Category: contrib Module: bind Announced:
>> 2013-07-26 Credits: Maxim Shudrak and the HP Zero Day
>> Initiative, ISC Affects: FreeBSD 8.4-RELEASE and FreeBSD
>> 9.x
>
> Are FreeBSD advisories now going to be posted to oss-security?
> They were not posted here before. The list charter strongly
> discourages posting of vendor security advisories:
>
> http://oss-security.openwall.org/wiki/mailing-lists/oss-security#list-content-guidelines
>
>
This was my fault, I forgot about that part of the list rules, my
intent was all the CVE's I assign should eventually show up here so
Mitre/etc don't have to chase down 1000 project sites/mailing lists to
find them. For large projects like FreeBSD this obviously won't be a
problem. But what should we do in future to make it easy to see what
happened to CVE assignments? cve-advisories@? tell people I assign to
email mitre directly (but I have no way to know if that gets
done/etc.), something else? Steven any requests/comments?
- --
Kurt Seifried Red Hat Security Response Team (SRT)
PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)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=/zBY
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
