oss-sec mailing list archives

Re: Does a documentation bug elevate to CVE status? - Crypto++


From: Jeffrey Walton <noloader () gmail com>
Date: Thu, 15 Sep 2016 18:11:47 -0400

Damn, you guys are ruthless...

The Crypto++ project is tracking this at
https://github.com/weidai11/cryptopp/issues/277.

Please make it a public bug/CVE. The Crypto++ project believe in
complete transparency so decision makers can assess risk and and apply
remediations commensurate with their data security posture.

Jeffrey Walton on behalf of Crypto++ project.


Current thread: