[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <7e78b8d8-860c-47f5-bbec-a967c277d539@oracle.com>
Date: Tue, 20 Feb 2024 15:30:28 -0800
From: Alan Coopersmith <alan.coopersmith@...cle.com>
To: oss-security@...ts.openwall.com
Subject: CVEs issued by the Linux kernel CNA
As recently announced [1], kernel.org is now a CNA for the Linux kernel, and
today issued its first 8 CVEs, as seen in the archives of their mailing list
at https://lore.kernel.org/linux-cve-announce/ .
Their documentation [2] warns that we should expect a "seemingly large number
of CVEs that are issued by the Linux kernel team".
Since there's already an archived mailing list covering the CVE assignments,
I don't think it makes sense to mirror that large amount of traffic here, but
to only bring to oss-security those that are especially interesting or useful
to discuss further. What do others think?
[1] http://www.kroah.com/log/blog/2024/02/13/linux-is-a-cna/
[2] https://docs.kernel.org/process/cve.html
--
-Alan Coopersmith- alan.coopersmith@...cle.com
Oracle Solaris Engineering - https://blogs.oracle.com/solaris
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
