linux-kernel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* Proper procedure for reporting possible security vulnerabilities?
@ 2005-01-10 16:46 Steve Bergman
  2005-01-10 18:23 ` Indrek Kruusa
                   ` (2 more replies)
  0 siblings, 3 replies; 36+ messages in thread
From: Steve Bergman @ 2005-01-10 16:46 UTC (permalink / raw)
  To: linux-kernel

There seems to be some confusion in certain quarters as to the proper 
procedure for reporting possible kernel security issues.   
REPORTING-BUGS says send bug reports to the maintainer of that area of 
the kernel.  However, what about areas for which a maintainer is not 
listed?  (e.g. VM)  It seems that some take that to mean send it 
directly to Linus and if you don't hear something back quickly, release 
an exploit to the wild.

So what is the preferred procedure and is it documented somewhere?  
Should it be made more prominent?

Thanks for any information,
Steve Bergman

^ permalink raw reply	[flat|nested] 36+ messages in thread
[parent not found: <200501101959.j0AJxUvl032294@laptop11.inf.utfsm.cl>]

end of thread, other threads:[~2005-01-18  1:14 UTC | newest]

Thread overview: 36+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2005-01-10 16:46 Proper procedure for reporting possible security vulnerabilities? Steve Bergman
2005-01-10 18:23 ` Indrek Kruusa
2005-01-10 19:24 ` Alan Cox
2005-01-11  9:32   ` Florian Weimer
2005-01-10 21:31 ` Florian Weimer
2005-01-10 21:42   ` Steve Bergman
2005-01-10 22:08     ` Diego Calleja
2005-01-11  0:19       ` Barry K. Nathan
2005-01-11  0:45         ` Diego Calleja
2005-01-11  9:35         ` Florian Weimer
2005-01-11 16:57         ` Jesper Juhl
2005-01-11 17:05           ` Jan Engelhardt
2005-01-10 22:09     ` linux-os
2005-01-11  0:44       ` Barry K. Nathan
2005-01-10 22:11     ` Jesper Juhl
2005-01-11  0:40       ` Chris Wright
2005-01-11  1:09         ` Diego Calleja
2005-01-11  1:18           ` Chris Wright
2005-01-11 17:05         ` Jesper Juhl
2005-01-11 16:39           ` Alan Cox
2005-01-11 21:25             ` Jesper Juhl
2005-01-11 21:29               ` Chris Wright
2005-01-12 21:05                 ` Jesper Juhl
2005-01-17 22:49                 ` Werner Almesberger
2005-01-17 22:52                   ` Chris Wright
2005-01-17 23:23                     ` Christoph Hellwig
2005-01-17 23:26                       ` Chris Wright
2005-01-17 23:57                         ` Alan Cox
2005-01-18  1:08                           ` Chris Wright
2005-01-11 17:57           ` Chris Wright
2005-01-12 12:23           ` Florian Weimer
2005-01-11  9:49       ` Florian Weimer
2005-01-11 16:10     ` Alan Cox
2005-01-12 12:33       ` Florian Weimer
2005-01-13 15:36         ` Alan Cox
     [not found] <200501101959.j0AJxUvl032294@laptop11.inf.utfsm.cl>
2005-01-10 21:36 ` Indrek Kruusa

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).