Comment 7 for bug 136302

Revision history for this message
Kees Cook (kees) wrote : Re: [Bug 136302] Re: Sylpheed POP3 Format String Vulnerability

On Wed, Sep 05, 2007 at 06:16:09PM -0000, Adna rim wrote:
> I don't understand why you make it that complicated and hard to fix a
> security vuln?

The goal is to make sure we don't have any regressions. A stable
release is just that -- a stable release. The people to really look to
are the upstream. All the other distros are in the same boat as us --
they need a minimal patch too, and upstream is in the best position to
provide it.