May 31
The Linux kernel developers have created this week a mailing list dedicated to its vulnerabilities. When a community member detect a flaw in the Linux source code, it may do so in this space.So far, this type of information was lost in the mass e-mails sent by developers to the team in charge of the nucleus.”We want this process is as open as possible,” said Chris Wright, developer of the kernel within the consortium OSDL (Open Source Development Labs).
“Sometimes, some people prefer to point out vulnerabilities to a small circle. They want to ensure that the risks are well understood and that the flaws will be corrected before being made public. The idea is to avoid now that some messages alerting pass by the wayside. ”