Ron Ben Yizhak on Muck Rack

Ron Ben Yizhak

Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile

Get in touch with Ron Ben

Contact Ron Ben, search articles and posts on X, monitor coverage, and track replies from one place.

Learn more about Muck Rack

Actions

Share this page

Is this you?

As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile

Articles

Re: Telnetd Vulnerability Report

|
By Ron Ben Yizhak
| seclists.org
oss-sec mailing list archives From: Ron Ben Yizhak <ron.benyizhak () safebreach com> Date: Tue, 24 Feb 2026 11:57:34 +0200 Hi all, I’d like to ensure we follow the standard CVE process here. Standard practice dictates that a CVE is issued per individual fix. Generally, once a fix is merged and released, it is assigned its own CVE. Even if that fix is later bypassed, the original merge stands as a unique event in the codebase, meaning we should issue two separate CVEs rather than grouping them.
Open in Who Shared View Duplicates (2) Issue with article?

Re: Telnetd Vulnerability Report

|
By Simon Josefsson, Ron Ben Yizhak, In A Chroot
| seclists.org
oss-sec mailing list archives From: Solar Designer <solar () openwall com> Date: Tue, 24 Feb 2026 06:29:43 +0100 Hi, Thank you for bringing this to oss-security, Justin! On Tue, Feb 24, 2026 at 03:17:02AM +0200, Justin Swartz wrote: I have been reviewing the recent vulnerability report by Ron Ben Yizhak regarding CREDENTIALS_DIRECTORY, as well as commit 4db2f19f which introduces unsetenv("CREDENTIALS_DIRECTORY") to address the problem.
Open in Who Shared Issue with article?
See all 2 articles
 •  Privacy  •  Terms  •  Security and Legal  •   •   •   • 

© 2026 Muck Rack

SOC 2® Certified