Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <CA+TcGd8ttW7ESrfYne24AAjcdf8TyEcRrWOdwvg5f+tWeswypg@mail.gmail.com>
Date: Sat, 11 Aug 2012 08:54:55 -0700
From: Kyle Creyts <kyle.creyts@...il.com>
To: oss-security@...ts.openwall.com
Subject: Re: Tunnel Blick: Multiple Vulnerabilities to Local
 Root and DoS (OS X)

Has he also met all conditions for requesting CVEs for these
vulnerabilities?
On Aug 11, 2012 8:46 AM, "Solar Designer" <solar@...nwall.com> wrote:

> On Sat, Aug 11, 2012 at 05:31:23PM +0200, Jason A. Donenfeld wrote:
> > Tunnel Blick, a popular OpenVPN manager for Macintosh, has several
> > vulnerabilities in an SUID helper. I'm not sure if this is the place
> > to report vulnerabilities in Macintosh software, but Tunnel Blick is
> > open source.
>
> I just want to confirm that this is on-topic (since Open Source) and
> desirable, as long as you also notify the maintainers (which you did).
>
> Thanks,
>
> Alexander
>

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.