Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.security > #5060

Re: Vulnerabilities rated medium or low risk may not be fixed by Debian security team, is that correct?

Path csiph.com!1.us.feeder.erje.net!feeder.erje.net!2.eu.feeder.erje.net!news.roellig-ltd.de!open-news-network.org!weretis.net!feeder4.news.weretis.net!news.mixmin.net!aioe.org!bofh.it!news.nic.it!robomod
From te3d4q@sigaint.org
Newsgroups linux.debian.security
Subject Re: Vulnerabilities rated medium or low risk may not be fixed by Debian security team, is that correct?
Date Thu, 13 Oct 2016 16:50:01 +0200
Message-ID <srPux-4ML-3@gated-at.bofh.it> (permalink)
References <sr6QO-8jN-23@gated-at.bofh.it> <sr7a9-8qo-1@gated-at.bofh.it> <srbx7-2Kh-7@gated-at.bofh.it> <srctb-3jq-13@gated-at.bofh.it> <srpgJ-3eb-11@gated-at.bofh.it> <srytH-10O-3@gated-at.bofh.it>
X-Mailbox-Line From debian-security-request@lists.debian.org Thu Oct 13 14:48:32 2016
Old-Return-Path <te3d4q@sigaint.org>
X-Amavis-Spam-Status No, score=-10.099 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, LDO_WHITELIST=-5, RP_MATCHES_RCVD=-3.099] autolearn=ham autolearn_force=no
X-Policyd-Weight using cached result; rate:hard: -6.1
MIME-Version 1.0
Content-Type text/plain;charset=iso-8859-1
Content-Transfer-Encoding 8bit
Importance Normal
X-Mailing-List <debian-security@lists.debian.org> archive/latest/28125
List-ID <debian-security.lists.debian.org>
List-URL <https://lists.debian.org/debian-security/>
List-Archive https://lists.debian.org/msgid-search/81bd9cd1a5fc808de5d7f2fc49f00541.webmail@localhost
Approved robomod@news.nic.it
Lines 13
Organization linux.* mail to news gateway
Sender robomod@news.nic.it
X-Original-Cc "Moritz Muehlenhoff" <jmm@debian.org>
X-Original-Date Thu, 13 Oct 2016 14:48:06 -0000
X-Original-Message-ID <81bd9cd1a5fc808de5d7f2fc49f00541.webmail@localhost>
X-Original-References <eae7d98cc7550642774010d3fa7fdfb4.webmail@localhost> <slrnnvq0pp.grj.jmm@inutil.org> <e13649a450ef6829f1f4d38cd6051e8d.webmail@localhost> <20161011210128.GA22554@inutil.org> <3cce61b9eed05dfe180e771e638706ca.webmail@localhost> <20161012203858.GA23365@inutil.org>
Xref csiph.com linux.debian.security:5060

Show key headers only | View raw


> Of course, every distribution makes their own assessment. After
> all each distro might ship an affected codebase in different
> versions/configs/environments.
>
> Cheers,
>         Moritz
>

Hi Moritz

I appreciate the time and effort that you spent on clarifying my questions.

Thank you.

Back to linux.debian.security | Previous | Next — Previous in thread | Find similar | Unroll thread


Thread

Vulnerabilities rated medium or low risk may not be fixed by Debian  security team, is that correct? te3d4q@sigaint.org - 2016-10-11 17:10 +0200
  Re: Vulnerabilities rated medium or low risk may not be fixed by  Debian security team, is that correct? Moritz Mühlenhoff <jmm@inutil.org> - 2016-10-11 17:30 +0200
    Re: Vulnerabilities rated medium or low risk may not be fixed by  Debian security team, is that correct? te3d4q@sigaint.org - 2016-10-11 22:10 +0200
      Re: Vulnerabilities rated medium or low risk may not be fixed by  Debian security team, is that correct? Moritz Muehlenhoff <jmm@debian.org> - 2016-10-11 23:10 +0200
        Re: Vulnerabilities rated medium or low risk may not be fixed by  Debian security team, is that correct? te3d4q@sigaint.org - 2016-10-12 12:50 +0200
          Re: Vulnerabilities rated medium or low risk may not be fixed by  Debian security team, is that correct? Michael Stone <mstone@debian.org> - 2016-10-12 17:20 +0200
            Re: Vulnerabilities rated medium or low risk may not be fixed by  Debian security team, is that correct? te3d4q@sigaint.org - 2016-10-13 16:50 +0200
              Re: Vulnerabilities rated medium or low risk may not be fixed by  Debian security team, is that correct? Michael Stone <mstone@debian.org> - 2016-10-13 20:40 +0200
                Re: Vulnerabilities rated medium or low risk may not be fixed by Debian security team, is that correct? Florian Weimer <fw@deneb.enyo.de> - 2016-10-18 22:30 +0200
                Re: Vulnerabilities rated medium or low risk may not be fixed by Debian  security team, is that correct? Henrique de Moraes Holschuh <hmh@debian.org> - 2016-10-19 17:00 +0200
                Re: Vulnerabilities rated medium or low risk may not be fixed by  Debian security team, is that correct? Alexander Schreiber <als@thangorodrim.ch> - 2016-10-20 01:00 +0200
                Re: Vulnerabilities rated medium or low risk may not be fixed by Debian  security team, is that correct? Henrique de Moraes Holschuh <hmh@debian.org> - 2016-10-20 02:40 +0200
          Re: Vulnerabilities rated medium or low risk may not be fixed by  Debian security team, is that correct? Moritz Muehlenhoff <jmm@inutil.org> - 2016-10-12 22:40 +0200
            Re: Vulnerabilities rated medium or low risk may not be fixed by  Debian security team, is that correct? te3d4q@sigaint.org - 2016-10-13 16:50 +0200

csiph-web