[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20110517115829.763068f3@redhat.com>
Date: Tue, 17 May 2011 11:58:29 +0200
From: Tomas Hoger <thoger@...hat.com>
To: oss-security@...ts.openwall.com
Subject: Re: Closed list
On Sat, 30 Apr 2011 19:26:14 +0400 Solar Designer wrote:
> > We were members of vendor-sec as Sun Microsystems team, and now
> > represent all of Oracle software and hardware products including but
> > not limited to Oracle Enterprise Linux, Solaris, Java, MySQL and
> > Open Office.
>
> Of these, only Oracle Enterprise Linux may qualify you for the list
> that has been setup so far. As you say, Oracle got onto vendor-sec
> through the acquisition of Sun. Although formally this satisfies
> "must be a vendor-sec member" for the initial seed membership of the
> new list, it does feel like a bypass of the intent of this
> requirement. Oracle was never actually accepted to vendor-sec for
> Oracle Enterprise Linux.
IIRC, Oracle was subscribed to v-s more than once - the "Sun" exploder
that was subscribed for quite a while (originally as Solaris vendor
probably), and individual OEL representative, added around the time
Oracle was in the process of acquiring Sun and there was no single
security contact for all products yet.
--
Tomas Hoger / Red Hat Security Response Team
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
