|
| From: | Ludovic Courtès |
| Subject: | Re: Dealing with CVEs that apply to unspecified package versions |
| Date: | Thu, 16 Mar 2017 11:07:55 +0100 |
| User-agent: | Gnus/5.13 (Gnus v5.13) Emacs/25.1 (gnu/linux) |
address@hidden (Ludovic Courtès) skribis: > What about raising the issue on oss-sec? Ideally the QEMU folks would > take care of labeling QEMU’s CVEs, the libxml2 folks would take care of > theirs, etc. For the record I followed up on this discussion on oss-sec: http://www.openwall.com/lists/oss-security/2017/03/15/3 Ludo’.
| [Prev in Thread] | Current Thread | [Next in Thread] |