Re: Closed list

[Tomas Hoger <thoger () redhat com>]

On Sat, 30 Apr 2011 19:26:14 +0400 Solar Designer wrote:

> > We were members of vendor-sec as Sun Microsystems team, and now
> > represent all of Oracle software and hardware products including but
> > not limited to Oracle Enterprise Linux, Solaris, Java, MySQL and
> > Open Office.
>
> Of these, only Oracle Enterprise Linux may qualify you for the list
> that has been setup so far.  As you say, Oracle got onto vendor-sec
> through the acquisition of Sun.  Although formally this satisfies
> "must be a vendor-sec member" for the initial seed membership of the
> new list, it does feel like a bypass of the intent of this
> requirement.  Oracle was never actually accepted to vendor-sec for
> Oracle Enterprise Linux.

IIRC, Oracle was subscribed to v-s more than once - the "Sun" exploder
that was subscribed for quite a while (originally as Solaris vendor
probably), and individual OEL representative, added around the time
Oracle was in the process of acquiring Sun and there was no single
security contact for all products yet.

-- 
Tomas Hoger / Red Hat Security Response Team