[linux-security] Re: [RHSA-1999:030-01] Buffer overflow in cron daemon

["J.H.M. Dassen \(Ray\)" <jdassen wi LeidenUniv nl>]

On Thu, Aug 26, 1999 at 19:24:42 -0600, Shaun Hedges wrote:
> I wonder, if this was discovered by another source such as Debian why
> haven't they made it public?

Two years ago Debian's handling of security issues wasn't as streamlined as
it is today (e.g. debian-security-announce lists debian org was created in
1998). I don't doubt it was announced publically, but perhaps not so visible
as to be seen by all other Linux distributors.

> That doesn't fit the stature of a commercial distributor in the Linux
> industry.

Please note that the Debian project is /not/ a commercial distributor. See
http://www.debian.org/ .

HTH,
Ray
-- 
Obsig: developing a new sig