Re: dhcpleased: verbose-mode stack OOB read in DHO_DOMAIN_NAME_SERVERS log loop
Stuart Thomas <[email protected]> Thu, 21 May 2026 23:52:20 +0100
| Newsgroups | gmane.os.openbsd.bugs |
|---|---|
| Message-ID | <CACS-ydOmPanYsiFOHX2DftpzDQK1aD+vQ1xPUDE=W463-C0rmA@mail.gmail.com> |
Hi Stuart, You're absolutely right, and I apologise for the confusion. I sent to bugs@ under the mistaken impression that the list operated with some degree of private handling for security reports — I've now noted that the correct channel for anything needing embargo is [email protected]. Since it's already public: please go ahead and fix whenever suits. I'll hold off publishing anything on my end until you've had a chance to patch, as a courtesy, but I won't pretend there's an embargo that no longer exists. Sorry for any inconvenience. Stuart On Thu, 21 May 2026 at 23:39, Stuart Henderson <[email protected]> wrote: > > On 2026/05/21 23:34, Stuart Thomas wrote: > > No public disclosure planned until you've had time to fix. > > That was a public disclosure. >