3 ms·
This sig at the bottom of Tavis's report: > This bug is subject to a 90 day disclosure deadline. If 90 days elapse > without a broadly available patch, then t
by teh_klev 11y ago
This sig at the bottom of Tavis's report:
> This bug is subject to a 90 day disclosure deadline. If 90 days elapse
> without a broadly available patch, then the bug report will automatically
> become visible to the public.
According to the sidebar the issue was reported on:
Reported-2016-Jan-19
and:
Deadline-90
Today is only 30 days since the initial report, why is this revealed today and not in another two months?
- deleted 11y ago[deleted]
- gpvos 11y agoJust below that: > Today (12 hours ago) tav...@google.com > Update today: > Hello Tavis, > Regarding the vulnerability below, we have issued a hotfix on 10th of February. > GB 4.25.380415.167 has the required fix and 90+% of existing users are updated as of now.
- teh_klev 11y agoAppreciated.
- jhgg 11y agoReading the first reply: >Regarding the vulnerability below, we have issued a hotfix on 10th of February. >GB 4.25.380415.167 has the required fix and 90+% of existing users are updated as of now. Since the issue was fixed and rolled out, it was reasonable to reveal it instead of waiting.
- teh_klev 11y agoAh, ok....thanks.
- deleted 11y ago[deleted]