oss-sec mailing list archives

Re: CVE-2019-13917 OVE-20190718-0006: Exim: security release ahead


From: Stuart Henderson <stu () spacehopper org>
Date: Mon, 22 Jul 2019 12:29:53 +0100

On 2019/07/22 11:21, Mikhail Klementev wrote:
Kindly notice that this is a public mail list.

The sender is clearly aware of this, see the timeline.

On Mon, Jul 22, 2019 at 12:00:13PM +0200, Heiko Schlittermann wrote:
More details and fixes are not yet public, but will be made public on
CRD, July 25th.

Timeline
========

t0: Thu Jul 18 2019
    - this notice to distros () vs openwall org and exim-maintainers () exim org
    - open limited access to our security Git repo. See below.

t0+~4d: Mon Jul 22 10:00:00 UTC 2019 [NOW]
    - heads-up notice to oss-security () lists openwall com,
      exim-users () exim org, and exim-announce () exim org

t0+~7d: Thu Jul 25 10:00:00 UTC 2019
    - Coordinated relase date
    - publish the patches in our official and public Git repositories
      and the packages on our FTP server.


Current thread: