mailing list of musl libc
 help / color / mirror / Atom feed
* [musl] Security issue in musl
@ 2021-04-29 10:29 Philipp Jeitner (SIT)
  2021-04-29 12:28 ` Ariadne Conill
  2021-04-30 19:57 ` Rich Felker
  0 siblings, 2 replies; 3+ messages in thread
From: Philipp Jeitner (SIT) @ 2021-04-29 10:29 UTC (permalink / raw)
  To: musl

Hi,

i would like to report a security issue in musl and would like to ask if 
this is the correct address to send the details to.

best
regards
Philipp Jeitner

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: [musl] Security issue in musl
  2021-04-29 10:29 [musl] Security issue in musl Philipp Jeitner (SIT)
@ 2021-04-29 12:28 ` Ariadne Conill
  2021-04-30 19:57 ` Rich Felker
  1 sibling, 0 replies; 3+ messages in thread
From: Ariadne Conill @ 2021-04-29 12:28 UTC (permalink / raw)
  To: musl

Hello,

On Thu, 29 Apr 2021, Philipp Jeitner (SIT) wrote:

> Hi,
>
> i would like to report a security issue in musl and would like to ask if this 
> is the correct address to send the details to.

It depends on the severity of the issue.  If it is not a big deal, go 
ahead and report it here.  Otherwise, it is probably best to report it to 
Rich privately and let him decide how to proceed.

Ariadne

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: [musl] Security issue in musl
  2021-04-29 10:29 [musl] Security issue in musl Philipp Jeitner (SIT)
  2021-04-29 12:28 ` Ariadne Conill
@ 2021-04-30 19:57 ` Rich Felker
  1 sibling, 0 replies; 3+ messages in thread
From: Rich Felker @ 2021-04-30 19:57 UTC (permalink / raw)
  To: Philipp Jeitner (SIT); +Cc: musl

On Thu, Apr 29, 2021 at 12:29:48PM +0200, Philipp Jeitner (SIT) wrote:
> Hi,
> 
> i would like to report a security issue in musl and would like to
> ask if this is the correct address to send the details to.

Thanks for getting in touch. Like Ariadne said, you can follow up with
me off-list if you think it's something that warrants coordinated
disclosure.

Rich

^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2021-04-30 19:57 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-04-29 10:29 [musl] Security issue in musl Philipp Jeitner (SIT)
2021-04-29 12:28 ` Ariadne Conill
2021-04-30 19:57 ` Rich Felker

mailing list of musl libc

This inbox may be cloned and mirrored by anyone:

	git clone --mirror http://inbox.vuxu.org/musl

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V1 musl musl/ http://inbox.vuxu.org/musl \
		musl@inbox.vuxu.org
	public-inbox-index musl

Example config snippet for mirrors.
Newsgroup available over NNTP:
	nntp://inbox.vuxu.org/vuxu.archive.musl


code repositories for the project(s) associated with this inbox:

	https://git.vuxu.org/mirror/musl/

AGPL code for this site: git clone https://public-inbox.org/public-inbox.git