oss-sec mailing list archives

Re: CVE-2019-13917 OVE-20190718-0006: Exim: security release ahead


From: Heiko Schlittermann <hs () schlittermann de>
Date: Mon, 22 Jul 2019 22:33:15 +0200

Eric,

Eric Blake <eblake () redhat com> (Mo 22 Jul 2019 15:28:33 CEST):

Perhaps part of the confusion stems from:

t0: Thu Jul 18 2019
    - this notice to distros () vs openwall org and exim-maintainers () exim org
    - open limited access to our security Git repo. See below.

This statement makes it sound like the fix can be downloaded by anyone
that knows about the git repo containing the fix...

Yes, blame on me. I missed to redact that part of the message.

Or even the choice of tense in this paragraph may help: it sounds like
past tense ("is the officially released version") even though at the
time of the email it is a future tense ("will become the officially
released version").

Thank you for your hints. Even I hope, we won't have a "next time", next
time I'll try to improve the wording/grammer of the messages I send.

    Best regards from Dresden/Germany
    Viele Grüße aus Dresden
    Heiko Schlittermann
--
 SCHLITTERMANN.de ---------------------------- internet & unix support -
 Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} -
 gnupg encrypted messages are welcome --------------- key ID: F69376CE -
 ! key id 7CBF764A and 972EAC9F are revoked since 2015-01 ------------ -

Attachment: signature.asc
Description:


Current thread: