oss-security - Re: Qualys Security Advisory - CVE-2015-3245 userhelper

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20150729210013.GA12344@openwall.com>
Date: Thu, 30 Jul 2015 00:00:13 +0300
From: Solar Designer <solar@...nwall.com>
To: oss-security@...ts.openwall.com
Subject: Re: Qualys Security Advisory - CVE-2015-3245 userhelper - CVE-2015-3246 libuser

All -

Let's end this thread here - I mean the topic of (not) releasing a
(weaponized) exploit at the same time with advisory.  All the major
opinions have been stated already.

So far, we rejected only one posting to this thread - it consisted of
the single word "Seconded." in support of one of the opinions.  Thus,
everyone had ample opportunity to state their opinion (except merely
"voting for" an opinion already stated).

After this point, we're going to start rejecting (likely) all or most
further postings to this thread on this same topic.  So please stop.

Thanks,

Alexander

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.