Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 3 Jul 2019 05:05:31 -0400
From:      grarpamp <grarpamp@gmail.com>
To:        freebsd-security@freebsd.org
Cc:        freebsd-questions@freebsd.org, jtl@freebsd.org, freebsd-core@freebsd.org,  info@freebsdfoundation.org
Subject:   Re: CVE-2019-5599 SACK Slowness (FreeBSD 12 using the RACK TCP Stack)
Message-ID:  <CAD2Ti2-HyiNTsjAo1WiRtYaOSNmahoDuREEbdhgU74TK%2BmKUCg@mail.gmail.com>
In-Reply-To: <CAD2Ti29iRAehxgCWEfnRs8BzgXu4vfO-jhfDJ1KQ%2BYvG-HPJVg@mail.gmail.com>
References:  <CAD2Ti29xZ2Qty8fqgjf_OLvvjODOGyLtWSCzo6xgFB51e-T0ig@mail.gmail.com> <20190618235535.GY32970@gmail.com> <CAD2Ti29PiuPy1DYZFPmAfiVXUFPG9WAa85%2BLeS5N5bE9UzbeQQ@mail.gmail.com> <CAD2Ti29iRAehxgCWEfnRs8BzgXu4vfO-jhfDJ1KQ%2BYvG-HPJVg@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On 6/24/19, grarpamp <grarpamp@gmail.com> wrote:
> On 6/18/19, grarpamp <grarpamp@gmail.com> wrote:
>> https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md
>> As it is not in the current .md, when was the issue
>> discovered by Netflix / Looney?
>
> One week has gone by, so asking again...

This is now into *third* week and *third* time this very
simple questions has been asked pursuant "actual discussion
around disclosure policies", from two public and at least one
private party, with zero response. Optics fogging up. Escalating
as such. Thanks.

> When was the issue discovered by Netflix / Looney?

> When did FreeBSD become aware of the issue?



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAD2Ti2-HyiNTsjAo1WiRtYaOSNmahoDuREEbdhgU74TK%2BmKUCg>