[Secure-testing-team] [Secure-testing-commits] r13457 - data/CVE

[Giuseppe Iuculano]

Michael Gilbert ha scritto:
> does this mean that you now have access to the apple's "private" info
> for their *publicly* disclosed webkit issues (i still don't see any
> info/patches related to these issues on any of the cve pages or anywhere
> else that's obvious)? if so, does that mean that you are to be primarily
> responsible for webkit security?  if so, that is good news given the
> circumstances; of course, it would be much more ideal for apple to
> actually disclose information about their "disclosed" issues.

No, I just discovered that Ubuntu people have the changeset links for every
webkit issue in their CVE tracker.


Cheers,
Giuseppe.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20091206/6da85a59/attachment.pgp>