[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20131015181913.GE20753@dirac.q-ix.net>
Date: Tue, 15 Oct 2013 20:19:14 +0200
From: Leon Weber <leon@...nweber.de>
To: oss-security@...ts.openwall.com
Cc: sebi@...ecware.net, j.wielicki@...ecware.net
Subject: Re: CVE request: pyxtrlock
On 15.10.2013 12:04:43, Kurt Seifried wrote:
> On 10/15/2013 07:14 AM, Leon Weber wrote:
> > Do you think this isn't CVE worthy, or was the request just lost
> > between other work? :-)
>
> Sorry, meant to reply, forgot. This was the one where I was wondering
> how many people us it. Debian doesn't ship it, nor does Red Hat,
> Fedora. When I searched it in Google it tries to correct me to
> "xtrlock", and for the term I get 644 results, so I'm thinking this
> falls into the "not enough people use it to make a CVE worthwhile"
> category, is that correct, or is there a large user pool/other factors
> I'm unaware of?
No other factors, I think. We have received feedback and bug reports
once in a while from a couple of people, so my best guess from that
is a userbase of 10-100 people; but I can't really tell.
Thanks for the reply, though. I simply wasn't sure if project size
matters for CVE worthiness :-)
-- Leon.
Download attachment "signature.asc" of type "application/pgp-signature" (199 bytes)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
