Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 29 Sep 2005 05:12:27 -0700 (PDT)
From:      Arne "Wörner" <arne_woerner@yahoo.com>
To:        Juergen Lock <nox@jelal.kn-bremen.de>
Cc:        freebsd-security@freebsd.org
Subject:   Re: New FreeBSD Security Officer
Message-ID:  <20050929121227.15619.qmail@web30315.mail.mud.yahoo.com>
In-Reply-To: <200509282145.j8SLjuR0092873@saturn.kn-bremen.de>

next in thread | previous in thread | raw e-mail | index | archive | help

--- Juergen Lock <nox@jelal.kn-bremen.de> wrote:
> Btw, should one expect a confirmation email when emailing
> security-officer@FreeBSD.org about a (possibly) new hole?  I'm
> wondering if two mails i sent got lost somehow...
> 
On http://www.freebsd.org./security/ I found the following:
"All FreeBSD Security issues should be reported directly to the
Security Officer Team (mailto:security@FreeBSD.org) personally or
otherwise to the Security Officer
(mailto:security-officer@FreeBSD.org). All reports should at least
contain:

A description of the vulnerability;
What versions of FreeBSD seem to be affected if possible;
Any plausible workaround;
And example code if possible.

After this information has been reported the Security Officer or a
Security Team delegate will get back with you."


This clearly says, that you contacted the right person, and that
somebody should "get back with you"... But it does not say when...
Maybe in a "timely manner"? :-))

I say, have u tried both email addresses (team and the SecOff
himself)?

I say, when did you send those two emails?

-Arne



		
__________________________________ 
Yahoo! Mail - PC Magazine Editors' Choice 2005 
http://mail.yahoo.com



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050929121227.15619.qmail>