Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 22 Jul 2019 22:33:15 +0200
From: Heiko Schlittermann <hs@...littermann.de>
To: oss-security@...ts.openwall.com
Subject: Re: CVE-2019-13917 OVE-20190718-0006: Exim: security
 release ahead

Eric,

Eric Blake <eblake@...hat.com> (Mo 22 Jul 2019 15:28:33 CEST):
>
> Perhaps part of the confusion stems from:
>
> >> t0: Thu Jul 18 2019
> >>     - this notice to distros@...openwall.org and exim-maintainers@...m.org
> >>     - open limited access to our security Git repo. See below.
>
> This statement makes it sound like the fix can be downloaded by anyone
> that knows about the git repo containing the fix...

Yes, blame on me. I missed to redact that part of the message.

> Or even the choice of tense in this paragraph may help: it sounds like
> past tense ("is the officially released version") even though at the
> time of the email it is a future tense ("will become the officially
> released version").

Thank you for your hints. Even I hope, we won't have a "next time", next
time I'll try to improve the wording/grammer of the messages I send.

    Best regards from Dresden/Germany
    Viele Grüße aus Dresden
    Heiko Schlittermann
--
 SCHLITTERMANN.de ---------------------------- internet & unix support -
 Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} -
 gnupg encrypted messages are welcome --------------- key ID: F69376CE -
 ! key id 7CBF764A and 972EAC9F are revoked since 2015-01 ------------ -

Download attachment "signature.asc" of type "application/pgp-signature" (489 bytes)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.