[Pkg-netatalk-devel] CVE fixes for netatalk in oldstable

Daniel Markstedt daniel at mindani.net
Fri Sep 1 06:44:24 BST 2023


------- Original Message -------
On Thursday, August 31st, 2023 at 12:20 AM, Jonas Smedegaard <jonas at jones.dk> wrote:

> > Good idea to increase the severity of the ticket. Done!
> 
> 
> Good. But oddly, Adam lowered severity again 6 hours later, without
> explanation.
> 
> I suggest that you post to the bugreport, X-Debbugs-Cc him, to (kindly!)
> ask for clarification. But read below about X-Debbugs-Cc...
> 

Frankly, I'm leaning towards not responding right now.
He told me to be patient. I can be patient. :)
Maybe in a week or two I'll ask for an update.

The lack of a sense of urgency for fixing known security issues is a bit surprising though.
I wonder if they will respond differently to 0-day fixes?

Cheers,
Daniel



More information about the pkg-netatalk-devel mailing list