Messages in this thread | | | Date | Mon, 10 Jan 2005 15:42:11 -0600 | From | Steve Bergman <> | Subject | Re: Proper procedure for reporting possible security vulnerabilities? |
| |
Florian Weimer wrote:
>Contact your vendor. You are using vendor kernels, are you? 8-) > >
Actually I am having a discussion with a Pax Team member about how the recent exploits discovered by the grsecurity guys should have been handled. They clam that they sent email to Linus and Andrew and did not receive a response for 3 weeks, and that is why they released exploit code into the wild.
Anyone here have any comments on what I should tell him?
Thanks, Steve Bergman
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |