Contributing Back

                							

                <!--X-Body-Begin-->
<!--X-User-Header-->

oss-sec
mailing list archives
<!--X-User-Header-End-->
<!--X-TopPNI-->

By Date

By Thread

</form>

<!--X-TopPNI-End-->
<!--X-MsgBody-->
<!--X-Subject-Header-Begin-->
Contributing Back

<!--X-Subject-Header-End-->
<!--X-Head-of-Message-->

From: Zhang Xiao &lt;xiao.zhang () windriver com&gt;

Date: Thu, 2 Jul 2020 17:33:20 +0800

<!--X-Head-of-Message-End-->
<!--X-Head-Body-Sep-Begin-->

<!--X-Head-Body-Sep-End-->
<!--X-Body-of-Message-->
Hi All,

I am an engineer of WindRiver. Thanks for Alexander's remind about the distribution and we would like to "backup" the 
first item of the administrative list:
https://oss-security.openwall.org/wiki/mailing-lists/distros#contributing-back

1. Promptly review new issue reports for meeting the list's requirements and confirm receipt of the report and, when 
necessary, inform the reporter of any issues with their report (e.g., obviously not actionable by the distros) and 
request and/or propose any required yet missing information (most notably, a tentative public disclosure date/time) /- 
primary: Oracle, backup: vacant /
Please let me know how we get started helping out.

And, I have another point want to discuss. As we know, sometimes, the CVE and NVD website don't upgrade their web page 
timely. For example:

the security maillist had an encrypted mail called "curl: overwrite local file with -J" in 20200617. It was a 
"pre-notification about a security advisory about to ship next week in sync with our next curl release", for 
CVE-2020-8177. On curl's git tree, that very bug did been fixed and released in 20200621:
https://github.com/curl/curl/commit/8236aba5854

But, till now, both cve.mitre.org and nvd.nist.gov still mark this CVE as "RESERVED":
https://nvd.nist.gov/vuln/detail/CVE-2020-8177
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177

So I wonder if that is also an contribution to remind them, if so, any advises to make it? And If it ca be defined as 
an contribution, we can take it. :-)

Thanks
Xiao

Attachment:
pEpkey.asc
Description: 

<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->

<!--X-Follow-Ups-End-->
<!--X-References-->
<!--X-References-End-->
<!--X-BotPNI-->

By Date

By Thread

Current thread:

Contributing Back Zhang Xiao (Jul 02)

Re: Contributing Back Francis Perron (Jul 02)

Re: Contributing Back Daniel Stenberg (Jul 02)

Re: Contributing Back Zhang Xiao (Jul 02)

Re: Contributing Back Solar Designer (Jul 11)

Re: Contributing Back Zhang Xiao (Jul 13)

Re: Contributing Back Solar Designer (Jul 20)
Re: Contributing Back Mohammad Tausif Siddiqui (Jul 23)
Re: Contributing Back Zhang Xiao (Jul 23)

Re: Contributing Back Solar Designer (Jul 23)
Re: Contributing Back Zhang Xiao (Jul 28)

(Thread continues...)

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->