oss-sec mailing list archives

Re: Running Java across a privilege boundry


From: Solar Designer <solar () openwall com>
Date: Tue, 9 Dec 2014 05:07:25 +0300

Distros -

Tim is not responding to my ping's about making the issue public. :-(
Can someone from the distros list, preferably from a distro who actually
bothered to handle the issue (did anyone?) make the issue public ASAP,
by posting in here?  Please.  Thanks.

Alexander

On Wed, Nov 26, 2014 at 06:54:48AM +0300, Solar Designer wrote:
On Sun, Nov 23, 2014 at 05:59:41PM +0300, Solar Designer wrote:
So far no distro has expressed any interest in having this embargoed.

Distros list members: please speak up (here or on the distros list, with
Tim CC'ed) if you'd like this embargoed.

Tim: if until Tuesday no distro says they want this embargoed, please go
ahead and make the issue fully public.  (On a related note, I hate it
when an issue is sort of "semi-public".  It's the worst possible case.
When this happens, it's a reason to opt for a shorter embargo period, or
for none at all indeed.)  If an embargo is requested, please make sure
there's an exact date and time for the planned public disclosure.

So far no distro has expressed any interest in having this embargoed,
and no specific coordinated disclosure date has been proposed by anyone.
Tim, please make the issue public now by posting it in here.  Thanks!

Alexander


Current thread: