Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 23 Apr 2015 03:04:23 +0300
From: Solar Designer <solar@...nwall.com>
To: oss-security@...ts.openwall.com
Subject: Re: USBCreator D-Bus service

Hi Tavis,

On Wed, Apr 22, 2015 at 04:50:08PM -0700, Tavis Ormandy wrote:
> [as-per previous discussion on the vendors list, skipping closed
> discussion of low-severity issue]

What "vendors list" do you mean?  Do you possibly mean "vendor's" rather
than "vendors" - that is, upstream's list?  (I do not recall seeing this
on the linux-distros list.)

Either way, it sounds weird to keep a low severity issue private.  Low
severity usually means not needing an embargo in the first place.  But I
guess it was the vendor's preference?

Thanks,

Alexander

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.