[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <2ac6a638-bc37-465d-923b-0952baf02f7e@oracle.com>
Date: Tue, 28 Apr 2026 16:33:06 -0700
From: Alan Coopersmith <alan.coopersmith@...cle.com>
To: oss-security@...ts.openwall.com,
MOHAMED AZIZ RAHMOUNI <mohamedaziz.rahmouni@...at.ucar.tn>,
secalert@...hat.com, Dmitry@...skoy.name
Subject: Re: [SECURITY] Out-of-Bounds Read in MPLS Extension Parsing — traceroute 2.1.2
On 4/28/26 15:03, MOHAMED AZIZ RAHMOUNI wrote:
> I am following a 90-day responsible disclosure policy. I intend to publish
> details publicly on 2026-07-27 unless a patch is available sooner, at which
> point I will coordinate the disclosure timeline with you.
No, you cc'ed oss-security, a public mailing list with public archives:
https://www.openwall.com/lists/oss-security/2026/04/28/20
so you made uncoordinated public disclosure (aka "dropped 0-day") today.
--
-Alan Coopersmith- alan.coopersmith@...cle.com
Oracle Solaris Engineering - https://blogs.oracle.com/solaris
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
