3 ms·
The disclosure is being published now. From the timeline at the bottom of the article, it becomes clear that they only ignored the issue for 2 months. That is
by ThePadawan 8y ago
The disclosure is being published now. From the timeline at the bottom of the article, it becomes clear that they only ignored the issue for 2 months.
That is still more than zero delay, but a bit more reasonable.
- A_No_Name_Mouse 8y agoHow is that? >"2017-12-06 Fixed with Chrome version 63.0 2018-05-15 Fixed with Firefox Quantum version 60.0" That's 9 months for Chrome and more than a year for FF Quantum?
- andrewaylett 8y agoBut also "2017-11-26 Reported the vulnerability to Mozilla’s VRP" because "due to some misunderstandings on our side, reporting the vulnerability to Mozilla was delayed". So I think "more than a year" is a little unfair to Mozilla.