Messages in this thread | | | Date | Mon, 10 Jan 2005 16:19:01 -0800 | From | "Barry K. Nathan" <> | Subject | Re: Proper procedure for reporting possible security vulnerabilities? |
| |
On Mon, Jan 10, 2005 at 11:08:27PM +0100, Diego Calleja wrote: > They could have mailed to *THIS* mailing list, so anyone can make a patch.
And abandon the whole idea of coordinated disclosure? That would put anyone using vendor kernels at a disadvantage (there would be a time gap between the vulnerability being public and the vendor kernel being released -- which happened anyway with uselib() but which doesn't *always* happen).
-Barry K. Nathan <barryn@pobox.com> - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |