* Security Point of Contact
@ 2022-05-25 16:59 Marius Muench
2022-05-25 19:35 ` Florian Weimer
0 siblings, 1 reply; 2+ messages in thread
From: Marius Muench @ 2022-05-25 16:59 UTC (permalink / raw)
To: gcc-help; +Cc: Fabian Freyer, v.m.duta, Cristiano Giuffrida, pagani
Dear GCC maintainers,
We are a group of researchers from VU Amsterdam, UC Santa Barbara, and
independents.
We found a potential security issue with the implementation of the
Itanium C++ ABI unwinding process, and were wondering if you have any
secure email contact point we can follow up on with additional details,
or whether we should post it directly to the public bugtracker after
coordinating with other affected parties.
Either way, we would like to disclose the information as soon as possible.
Best,
Fabian, Victor, Fabio, Marius & Cristiano
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: Security Point of Contact
2022-05-25 16:59 Security Point of Contact Marius Muench
@ 2022-05-25 19:35 ` Florian Weimer
0 siblings, 0 replies; 2+ messages in thread
From: Florian Weimer @ 2022-05-25 19:35 UTC (permalink / raw)
To: Marius Muench via Gcc-help
Cc: Marius Muench, pagani, Cristiano Giuffrida, Fabian Freyer, v.m.duta
* Marius Muench via Gcc-help:
> We are a group of researchers from VU Amsterdam, UC Santa Barbara, and
> independents.
> We found a potential security issue with the implementation of the
> Itanium C++ ABI unwinding process, and were wondering if you have any
> secure email contact point we can follow up on with additional
> details, or whether we should post it directly to the public
> bugtracker after coordinating with other affected parties.
> Either way, we would like to disclose the information as soon as possible.
Please file a public bug once you are ready. This does not sound like
something that would benefit a lot from pre-disclosure coordination.
Thanks,
Florian
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2022-05-25 19:35 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2022-05-25 16:59 Security Point of Contact Marius Muench
2022-05-25 19:35 ` Florian Weimer
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).