[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20110430140340.GA29810@openwall.com>
Date: Sat, 30 Apr 2011 18:03:40 +0400
From: Solar Designer <solar@...nwall.com>
To: oss-security@...ts.openwall.com
Subject: Re: Closed list
Hi Jeff,
On Sat, Apr 30, 2011 at 08:38:57AM -0400, Jeff Mitchell wrote:
> I didn't hear back about this -- can someone confirm?
I am sorry about the delay in getting back to you on this. I don't
treat these subscription requests as high priority, but I do "flag" them
such that I don't miss any. As you might have noticed, I handle them in
batches; the delay for some has been over 10 days so far (OK, that might
have been excessive).
> On 04/26/2011 12:02 PM, Jeff Mitchell wrote:
> > Please add me as a KDE security contact.
> >
> > sec 1024D/D0AE1825 2009-01-19
> > Key fingerprint = EAB8 A2AC 64A4 434E E79C E454 00D6 1DA8 D0AE 1825
> > uid Jeff Mitchell <mitchell@....org>
The list that has been setup so far is Linux distro security contacts;
KDE is not a Linux distro, hence it should not be on the list. That
said, I'll save your request to a separate folder in case we ever setup
a suitable list. There have been no requests for the setup of a
non-OS-distro vendor security contacts list so far, and I see too little
use for such a list.
Folks on the Linux distro list (and then on other distro lists, if we
add any) are supposed to make an attempt to identify and notify
upstreams and other affected projects, including KDE when appropriate.
There has in fact been some effort to do that for the issues brought up
on the list so far.
Alexander
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
