Re: Proper procedure for reporting possible security vulnerabilities?

[Steve Bergman]

Florian Weimer wrote:

> Contact your vendor.  You are using vendor kernels, are you? 8-)
>  

Actually I am having a discussion with a Pax Team member about how the 
recent exploits discovered by the grsecurity guys should have been 
handled.  They clam that they sent email to Linus and Andrew and did not 
receive a response for 3 weeks, and that is why they released exploit 
code into the wild.

Anyone here have any comments on what I should tell him?

Thanks,
Steve Bergman

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/