Re: The New Security Build Infrastructure

[Gergely Nagy <algernon@debian.org>]

> I disagree with t=1, t=1 should be "researcher releases PUBLIC advisory"
> in my opinion.

So users can flame all distributions for not having a fix available for
a know vulnerability? And especially Debian, because as previously said,
with 11 architectures, it will come out dead last?

I'd be very pissed if that would be how things work, as I do not want to
let every bugtraq reader try the published exploit BEFORE there is a fix
available.


-- 
To UNSUBSCRIBE, email to debian-devel-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org