linux-kernel - Re: ZDI-CAN-22273: New Vulnerability Report

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <2024021605-disloyal-overlying-ed56@gregkh>
Date: Fri, 16 Feb 2024 18:37:15 +0100
From: "gregkh@...uxfoundation.org" <gregkh@...uxfoundation.org>
To: "zdi-disclosures@...ndmicro.com" <zdi-disclosures@...ndmicro.com>
Cc: "linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>,
	"linux-usb@...r.kernel.org" <linux-usb@...r.kernel.org>,
	"valentina.manea.m@...il.com" <valentina.manea.m@...il.com>,
	"shuah@...nel.org" <shuah@...nel.org>,
	"i@...ithal.me" <i@...ithal.me>
Subject: Re: ZDI-CAN-22273: New Vulnerability Report

On Fri, Feb 16, 2024 at 05:27:57PM +0000, zdi-disclosures@...ndmicro.com wrote:
> Hello,
> Do you have any updates to share regarding this vulnerability? The 120-day deadline for this case was January 31, 2024. We will publish this soon in accordance with the ZDI 120-day Disclosure policy if there is not an available fix.

I asked some questions to this, a few hours after you sent this to us,
yet we recieved no response and as such it did not go anywhere.

So this is all on you now.

Also note, you are talking on a public mailing list, there is not much
left to "disclose" :)

thanks,

greg k-h