oss-sec mailing list archives

Re: accepting new members to (linux-)distros lists


From: Simon McVittie <smcv () debian org>
Date: Wed, 28 Jun 2017 21:22:21 +0100

On Wed, 28 Jun 2017 at 22:02:40 +0200, Solar Designer wrote:
Neither you nor others you inform may use the information for anything
other than getting the issue fixed for your distro's users [etc.]

To be clear, does this forbid bringing upstream maintainers into the loop
to fix vulnerabilities or review fixes in the code that they maintain?

(If it does, that seems likely to lead to bugs in the deployed fixes.)

    S


Current thread: