Path: csiph.com!newsfeed.xs4all.nl!newsfeed7.news.xs4all.nl!bofh.it!news.nic.it!robomod From: Robert Ricardo Ikaka Newsgroups: linux.debian.security Subject: Re: replacing misleading debian.org/security claims Date: Sat, 15 Jan 2022 04:30:02 +0100 Message-ID: References: X-Original-To: =?UTF-8?Q?Pierre=2DElliott_B=C3=A9cue?= X-Mailbox-Line: From debian-security-request@lists.debian.org Sat Jan 15 03:20:18 2022 Old-Return-Path: X-Amavis-Spam-Status: No, score=-5.199 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=2, LDO_WHITELIST=-5, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=no autolearn_force=no X-Policyd-Weight: using cached result; rate: -5.5 X-Gm-Message-State: AOAM5310oeLOGvLCt168i2ypQSzoHC+kWBJlupHA9xKCB2tL+jzv/EMj 44REPMFNxyaKNwdRqLjxt512lOLJW3tYYJ5u3EQ= X-Google-SMTP-Source: ABdhPJzNJCIP2nW5fmNK2FakOHJ76XGKFiY4A6V631hc5iVHgMcezEuf5KAaMzS0O0NIyqRXZBNOOa1t2eHhzzbwRLM= X-Received: by 2002:a63:d753:: with SMTP id w19mr2317347pgi.23.1642216800927; Fri, 14 Jan 2022 19:20:00 -0800 (PST) MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="00000000000010448805d59665a9" X-Mailing-List: archive/latest/29138 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/CAPg0vjro5FDF0ZOTFz2_s29vryxS=E81SgHWLmW+cVAfK9R5uA@mail.gmail.com Approved: robomod@news.nic.it Lines: 94 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Cc: max , Security , debian-security@lists.debian.org X-Original-Date: Sat, 15 Jan 2022 06:19:49 +0300 X-Original-Message-ID: X-Original-References: <930530503.813075.1640717192123@ichabod.co-bxl> <6b04bca57af4c49dca74e9089f7d9ad49f4058b5.camel@debian.org> <896508942.487248.1642117124251@ichabod.co-bxl> <874k66hr7u.fsf@jaatynyt> Xref: csiph.com linux.debian.security:5994 --00000000000010448805d59665a9 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable https://chng.it/jJvMChbdsJ =D1=81=D0=B1, 15 =D1=8F=D0=BD=D0=B2. 2022 =D0=B3., 01:45 Pierre-Elliott B= =C3=A9cue : > > max wrote on 14/01/2022 at 00:38:44+0100: > > > January 10, 2022 6:31:37 AM CET Salvatore Bonaccorso > wrote: > > > >> We are going to stop anyway at some point displaying the NVD severity, > for context see #992115. > > > > As I see it, Debian should be free to display or not display NVD > > ratings, but it shouldn't display the incorrect "medium" NVD ratings, > > when they are actually much worse, as it's been doing. In fact, I > > think it should issue a public retraction. > > > > Any progress on my original proposal? Are the wheels in motion? > > > > https://lists.debian.org/debian-security/2021/12/msg00002.html > > https://lists.debian.org/debian-security/2022/01/msg00002.html > > > > I can't help but feel that it's a 15 second job for anyone with write > > access to the site, and the reprehensibility of the current claims > > should be obvious to those with a working moral compass. > > Maybe at some time you could just stop keeping on insisting on that > matter? > > Regards, > -- > PEB > > --00000000000010448805d59665a9 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
=D1=81=D0=B1, 15 =D1=8F=D0=BD=D0=B2. 2022 =D0=B3., 01:45 Pierre= -Elliott B=C3=A9cue <peb@debian.org>:

max=C2=A0 <maxwillb@mailfence.com> wrote on 14/01/2022 at 00:= 38:44+0100:

> January 10, 2022 6:31:37 AM CET Salvatore Bonaccorso <carnil@debian.= org> wrote:
>
>> We are going to stop anyway at some point displaying the NVD sever= ity, for context see #992115.
>
> As I see it, Debian should be free to display or not display NVD
> ratings, but it shouldn't display the incorrect "medium"= NVD ratings,
> when they are actually much worse, as it's been doing. In fact, I<= br> > think it should issue a public retraction.
>
> Any progress on my original proposal? Are the wheels in motion?
>
> https://lists.debian.o= rg/debian-security/2021/12/msg00002.html
> https://lists.debian.o= rg/debian-security/2022/01/msg00002.html
>
> I can't help but feel that it's a 15 second job for anyone wit= h write
> access to the site, and the reprehensibility of the current claims
> should be obvious to those with a working moral compass.

Maybe at some time you could just stop keeping on insisting on that
matter?

Regards,
--
PEB

--00000000000010448805d59665a9--