Re: replacing misleading debian.org/security claims
January 10, 2022 6:31:37 AM CET Salvatore Bonaccorso <carnil@debian.org> wrote:
> We are going to stop anyway at some point displaying the NVD severity, for context see #992115.
As I see it, Debian should be free to display or not display NVD ratings, but it shouldn't display the incorrect "medium" NVD ratings, when they are actually much worse, as it's been doing. In fact, I think it should issue a public retraction.
Any progress on my original proposal? Are the wheels in motion?
https://lists.debian.org/debian-security/2021/12/msg00002.html
https://lists.debian.org/debian-security/2022/01/msg00002.html
I can't help but feel that it's a 15 second job for anyone with write access to the site, and the reprehensibility of the current claims should be obvious to those with a working moral compass.
--
Sent with https://mailfence.com
Secure and private email
Reply to: