Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #5999

Re: replacing misleading debian.org/security claims

From max <maxwillb@mailfence.com>
Newsgroups linux.debian.security
Subject Re: replacing misleading debian.org/security claims
Date 2022-01-18 05:50 +0100
Message-ID <DGOBr-207-3@gated-at.bofh.it> (permalink)
References <DzZBF-2LF-19@gated-at.bofh.it> <DC7Y5-7cX-1@gated-at.bofh.it> <DDVzs-1D2-11@gated-at.bofh.it> <DFhRf-6CP-3@gated-at.bofh.it> <DFDyq-4Hf-7@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

January 14, 2022 11:44:39 PM CET "Pierre-Elliott Bécue" <peb@debian.org> wrote:

> Maybe at some time you could just stop keeping on insisting on that
matter?

I thought this was just an oversight, but since this is intentional, it isn't. How can you possibly justify and continue such a flagrant misrepresentation?


"""
We handle all security problems brought to our attention and ensure that
they are corrected within a reasonable timeframe. Many advisories are 
coordinated with other free software vendors and are published the same day 
a vulnerability is made public and we also have a Security Audit team that 
reviews the archive looking for new or unfixed security bugs.
"""


Half a year is not "within a day", or "a reasonable timeframe".

Mislabeling "critical" NVD ratings as "medium" fits the same pattern.

-- 
Sent with https://mailfence.com  
Secure and private email

Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

replacing misleading debian.org/security claims max  <maxwillb@mailfence.com> - 2021-12-30 10:10 +0100
  Re: replacing misleading debian.org/security claims Silas Cutler <Silas@BlackLab.io> - 2021-12-30 17:20 +0100
    Re: replacing misleading debian.org/security claims Paul Wise <pabs@debian.org> - 2022-01-05 07:30 +0100
  Re: replacing misleading debian.org/security claims Paul Wise <pabs@debian.org> - 2022-01-05 07:30 +0100
    Re: replacing misleading debian.org/security claims max  <maxwillb@mailfence.com> - 2022-01-10 01:50 +0100
    Incorrect NVD severity ratings: (was: replacing misleading  debian.org/security claims) max  <maxwillb@mailfence.com> - 2022-01-10 02:00 +0100
    Re: replacing misleading debian.org/security claims Salvatore Bonaccorso <carnil@debian.org> - 2022-01-10 06:40 +0100
      Re: replacing misleading debian.org/security claims max  <maxwillb@mailfence.com> - 2022-01-14 00:40 +0100
        Re: replacing misleading debian.org/security claims Pierre-Elliott Bécue <peb@debian.org> - 2022-01-14 23:50 +0100
          Re: replacing misleading debian.org/security claims Robert Ricardo Ikaka <ikaka.robert.online@gmail.com> - 2022-01-15 04:30 +0100
          Re: replacing misleading debian.org/security claims max  <maxwillb@mailfence.com> - 2022-01-18 05:50 +0100
            Re: replacing misleading debian.org/security claims Pierre-Elliott Bécue <peb@debian.org> - 2022-01-18 23:40 +0100
              Re: replacing misleading debian.org/security claims max  <maxwillb@mailfence.com> - 2022-01-20 23:00 +0100
                Re: replacing misleading debian.org/security claims RP <reyadmin@gmail.com> - 2022-01-21 02:20 +0100
                Re: replacing misleading debian.org/security claims Pierre-Elliott Bécue <peb@debian.org> - 2022-01-21 12:00 +0100

csiph-web