[NBLUG/talk] reporting a bug in a major distro

Devin Carraway nblug-talk-list at devin.com
Sat Aug 23 23:46:00 PDT 2003


On Sat, Aug 23, 2003 at 09:38:28PM -0700, error wrote:
> What would be your opinion on the correct way to report it?

Most every distro has a security contact and a recommended procedure for
notifying them of vulnterabilities.  Use it if the vulnterability you're
looking at is distro-specific; indeed this isn't a bad procedure anyway,
since distros are accustomed to dealing with these sorts of things and
have preestablished relationships & credibility with upstream authors.



More information about the talk mailing list