3 ms·
Is it normal for a security issue of this magnitude to have a 12 day notification period for everyone? That seems... short.
by nickweb 6y ago
Is it normal for a security issue of this magnitude to have a 12 day notification period for everyone? That seems... short.
- jwilk 6y agoYes. This was coordinated on the distros mailing list, which has maximum embargo period of 14 days, with periods shorter than 7 days preferable: https://oss-security.openwall.org/wiki/mailing-lists/distros#list-policy-and-instructions-for-reporters https://oss-security.openwall.org/wiki/mailing-lists/distros...
- cpncrunch 6y agoStill no update for Centos 8, so I'm not sure that worked too well.