Home page logo
/

oss-sec logo oss-sec mailing list archives

Re: Request for linux-distros list membership
From: Kurt Seifried <kseifried () redhat com>
Date: Mon, 01 Jul 2013 12:39:04 -0600

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 07/01/2013 11:01 AM, Solar Designer wrote:
Hi Sona,

On Mon, Jul 01, 2013 at 11:25:37AM +0000, Sona Sarmadi wrote:
Please add Enea Linux information to: 
http://oss-security.openwall.org/wiki/vendors

You're the one to add your information to the wiki (just register
for an account and edit the page), and this is desirable regardless
of whether you'd be on the private distros list or not.  I went to
your website at http://www.enea.com and was not able to (quickly)
find any information on your security response, advisories,
software updates, etc.  Without such information, we cannot even
consider you for membership of the private list.

Thanks,

Alexander


Speaking personally, not on behalf of Red Hat here, yeah, I can't find
ANY security related info on your website for your products.
Personally speaking, I would strongly oppose membership even if they
throw up some security related web pages as it's obvious that this
isn't a long term effort but "oh we should join distros@, throw some
web pages up? ok, done!" Until a vendor has shown some long term
effort to do security properly I suspect letting them onto distros@
would only increase the chances of a leak and devaluing the list in
general.

- -- 
Kurt Seifried Red Hat Security Response Team (SRT)
PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
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=Caum
-----END PGP SIGNATURE-----


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]