2 ms·
Some of these patches involve dates that are quite old. For example, https://rubyonrails-security.googlegroups.com/attach/6c2482d4ed1545e6/3-0-jdom.patch?view=1
by marshray 14y ago
Some of these patches involve dates that are quite old. For example, https://rubyonrails-security.googlegroups.com/attach/6c2482d4ed1545e6/3-0-jdom.patch?view=1&part=3 https://rubyonrails-security.googlegroups.com/attach/6c2482d... bears a timestamp of Fri, 8 Feb 2013 02:48:22 +0000.
Is this indicative of the time the vulnerability was reported?
Is it normal procedure for a patch for a security vulnerability to delayed for 36 days?