Vulnerability Development mailing list archives
Re: Vendor Changelogs /Notifications
From: Blue Boar <BlueBoar () thievco com>
Date: Thu, 05 Sep 2002 12:14:59 -0700
quentyn () fotango com wrote: > Is it appropriate to send notifications to public lists if you spot that > a vendor has fixed a serious security hole ( mentioned only in the > change log) but hasn't sent any notification and doesn't have any > notification on their site ? Other than using the product ( and reading > change logs) I have had nothing to do with this issue. It has been done before, both on Bugtraq and here. It's probably appropriate to both places, Bugtraq so people are aware there's a problem and fix, and here, since the vulnerability may not have been otherwise explored. BB
Current thread:
- Vendor Changelogs /Notifications quentyn (Sep 05)
- Re: Vendor Changelogs /Notifications Blue Boar (Sep 05)
- <Possible follow-ups>
- RE: Vendor Changelogs /Notifications Craig, Scott (Sep 06)