Re: Qualys Security Advisory - CVE-2015-3245 userhelper - CVE-2015-3246 libuser

[Stephan Wiesand <stephan.wiesand () gmail com>]

On Jul 23, 2015, at 20:43 , Leif Nixon wrote:

> Qualys Security Advisory <qsa () qualys com> writes:
>
> > Hello, it is July 23, 2015, 17:00 UTC, the Coordinated Release Date for
> > CVE-2015-3245 and CVE-2015-3246.  Please find our advisory below, and
> > our exploit attached.
>
> *Why* are you releasing a full exploit just minutes after the patch is
> released?
>
> (Disclosure: I am employed by Red Hat, but this is my purely personal question.)

Wild guess: Their customers had plenty of time to understand the issue and its impact, and to roll out either a fix or 
some mitigation. And thus an edge. Looks like "just business...".