Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #6000

Re: replacing misleading debian.org/security claims

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

max  <maxwillb@mailfence.com> wrote on 18/01/2022 at 05:46:10+0100:

> January 14, 2022 11:44:39 PM CET "Pierre-Elliott Bécue" <peb@debian.org> wrote:
>
>> Maybe at some time you could just stop keeping on insisting on that
>> matter?
>
> I thought this was just an oversight, but since this is intentional,
> it isn't. How can you possibly justify and continue such a flagrant
> misrepresentation?
>
>
> """
> We handle all security problems brought to our attention and ensure that
> they are corrected within a reasonable timeframe. Many advisories are 
> coordinated with other free software vendors and are published the same day 
> a vulnerability is made public and we also have a Security Audit team that 
> reviews the archive looking for new or unfixed security bugs.
> """
>
>
> Half a year is not "within a day", or "a reasonable timeframe".
>
> Mislabeling "critical" NVD ratings as "medium" fits the same pattern.

Your behaviour could be seen as aggressive.

If you keep going on, there is a high chance that everybody will start
ignoring you, or, if you keep being pushy, ask that you are temporarily
prevented to mail debian lists.

You'll therefore not obtain the expected result, and people will start
ignoring you.

You got a reply from Salvatore and this is quite enough for now.

-- 
PEB

Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

replacing misleading debian.org/security claims max  <maxwillb@mailfence.com> - 2021-12-30 10:10 +0100
  Re: replacing misleading debian.org/security claims Silas Cutler <Silas@BlackLab.io> - 2021-12-30 17:20 +0100
    Re: replacing misleading debian.org/security claims Paul Wise <pabs@debian.org> - 2022-01-05 07:30 +0100
  Re: replacing misleading debian.org/security claims Paul Wise <pabs@debian.org> - 2022-01-05 07:30 +0100
    Re: replacing misleading debian.org/security claims max  <maxwillb@mailfence.com> - 2022-01-10 01:50 +0100
    Incorrect NVD severity ratings: (was: replacing misleading  debian.org/security claims) max  <maxwillb@mailfence.com> - 2022-01-10 02:00 +0100
    Re: replacing misleading debian.org/security claims Salvatore Bonaccorso <carnil@debian.org> - 2022-01-10 06:40 +0100
      Re: replacing misleading debian.org/security claims max  <maxwillb@mailfence.com> - 2022-01-14 00:40 +0100
        Re: replacing misleading debian.org/security claims Pierre-Elliott Bécue <peb@debian.org> - 2022-01-14 23:50 +0100
          Re: replacing misleading debian.org/security claims Robert Ricardo Ikaka <ikaka.robert.online@gmail.com> - 2022-01-15 04:30 +0100
          Re: replacing misleading debian.org/security claims max  <maxwillb@mailfence.com> - 2022-01-18 05:50 +0100
            Re: replacing misleading debian.org/security claims Pierre-Elliott Bécue <peb@debian.org> - 2022-01-18 23:40 +0100
              Re: replacing misleading debian.org/security claims max  <maxwillb@mailfence.com> - 2022-01-20 23:00 +0100
                Re: replacing misleading debian.org/security claims RP <reyadmin@gmail.com> - 2022-01-21 02:20 +0100
                Re: replacing misleading debian.org/security claims Pierre-Elliott Bécue <peb@debian.org> - 2022-01-21 12:00 +0100

csiph-web