Re: Xen Critical vulnerability CVE-2015-7835 unpatched in Opensuse/Xen packages

[email protected] Fri, 30 Oct 2015 16:14:24 +0100
Newsgroups gmane.linux.suse.security
Message-ID <[email protected]>
On Fri, Oct 30, 2015 at 06:53:38AM -0700, PGNet Dev wrote:
> It's not clear to me why Opensuse is not.  Obviously Suse 'knew'.

Yes, we knew. But because we can't disclose this issues we're not able to
work on updates in OBS until they are public. Then it's a matter of how
fast we get submits we can work with

Johannes
-- 
GPG Key E7C81FA0       EE16 6BCE AD56 E034 BFB3  3ADD 7BF7 29D5 E7C8 1FA0
Subkey fingerprint:    250F 43F5 F7CE 6F1E 9C59  4F95 BC27 DD9D 2CC4 FD66
SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton
HRB 21284 (AG Nürnberg)
signature.asc (application/pgp-signature, 801 B)
-----BEGIN PGP SIGNATURE-----
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=U41o
-----END PGP SIGNATURE-----