Comment 12 for bug 1897287
Revision history for this message
| Mike Salvatore (mikesalvatore) wrote | #12 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
7020100
(Get the code!)
Thanks, cschramm. Is it safe for us to publish our fixes, then? Generally we include the CVE ID and a description of the vulnerability in our changelog and publish on CRD.
Since it doesn't sound like there's an official CRD and the vulnerabilities are semi-public, is there any reason we shouldn't publish our packages at this point? If you're not ready for us to make our packages public, can we set a CRD?