oss-sec mailing list archives

Re: USBCreator D-Bus service


From: Solar Designer <solar () openwall com>
Date: Thu, 23 Apr 2015 03:04:23 +0300

Hi Tavis,

On Wed, Apr 22, 2015 at 04:50:08PM -0700, Tavis Ormandy wrote:
[as-per previous discussion on the vendors list, skipping closed
discussion of low-severity issue]

What "vendors list" do you mean?  Do you possibly mean "vendor's" rather
than "vendors" - that is, upstream's list?  (I do not recall seeing this
on the linux-distros list.)

Either way, it sounds weird to keep a low severity issue private.  Low
severity usually means not needing an embargo in the first place.  But I
guess it was the vendor's preference?

Thanks,

Alexander


Current thread: