oss-sec mailing list archives
Re: Running Java across a privilege boundry
From: Solar Designer <solar () openwall com>
Date: Wed, 26 Nov 2014 06:54:48 +0300
On Sun, Nov 23, 2014 at 05:59:41PM +0300, Solar Designer wrote:
So far no distro has expressed any interest in having this embargoed. Distros list members: please speak up (here or on the distros list, with Tim CC'ed) if you'd like this embargoed. Tim: if until Tuesday no distro says they want this embargoed, please go ahead and make the issue fully public. (On a related note, I hate it when an issue is sort of "semi-public". It's the worst possible case. When this happens, it's a reason to opt for a shorter embargo period, or for none at all indeed.) If an embargo is requested, please make sure there's an exact date and time for the planned public disclosure.
So far no distro has expressed any interest in having this embargoed, and no specific coordinated disclosure date has been proposed by anyone. Tim, please make the issue public now by posting it in here. Thanks! Alexander
Current thread:
- Running Java across a privilege boundry Tim Brown (Nov 22)
- Re: Running Java across a privilege boundry Russ Allbery (Nov 22)
- Re: Running Java across a privilege boundry Marc Chadwick (Nov 22)
- Re: Running Java across a privilege boundry Russ Allbery (Nov 22)
- Re: Running Java across a privilege boundry Tim Brown (Nov 22)
- Re: Running Java across a privilege boundry Solar Designer (Nov 23)
- Re: Running Java across a privilege boundry Solar Designer (Nov 25)
- Re: Running Java across a privilege boundry Solar Designer (Dec 08)
- Re: Running Java across a privilege boundry Tim Brown (Dec 18)
- Re: Running Java across a privilege boundry Jakub Wilk (Dec 18)
- Re: Running Java across a privilege boundry Martin Carpenter (Dec 18)
- Re: Running Java across a privilege boundry Jakub Wilk (Dec 18)
- Re: Running Java across a privilege boundry Martin Carpenter (Dec 18)
- Re: Running Java across a privilege boundry Alexander Cherepanov (Dec 18)
- Re: Running Java across a privilege boundry Martin Carpenter (Dec 18)
- Re: Running Java across a privilege boundry Marc Chadwick (Nov 22)
- Re: Running Java across a privilege boundry Russ Allbery (Nov 22)
- Re: Running Java across a privilege boundry Alexander Cherepanov (Dec 18)