From: Chris Reffett <creffett@gentoo.org>
To: gentoo-security@lists.gentoo.org
Subject: Re: [gentoo-security] Soliciting feedback for the GLSA-2 format
Date: Thu, 09 Jan 2014 10:44:37 -0500 [thread overview]
Message-ID: <52CEC3E5.8060305@gentoo.org> (raw)
In-Reply-To: <52CEC376.5060606@gentoo.org>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 01/09/2014 10:42 AM, Alex Legler wrote:
> On 09.01.2014 01:08, Chris Reffett wrote:
>> On 01/07/2014 08:42 PM, Tobias Heinlein wrote:
>>> On 08.01.2014 02:40, Tobias Heinlein wrote:
>>>> Our new approach works more like a whitelist;
>>
>>> "more like a blacklist", that is.
>>
>>
>> I kind of would like the workaround field to remain (but perhaps
>> be optional) since I have seen a few vulns that actually did
>> have functional workarounds. Not absolutely necessary.
>>
>
> Does it need to have its own field, can't it be part of the
> (temporary) resolution?
>
>> Chris Reffett
>>
>
I guess it would work as part of the resolution, perhaps we could have
a template for "A temporary fix for this issue is also available: ..."
for that. Didn't think of that.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iKYEARECAGYFAlLOw+RfFIAAAAAALgAoaXNzdWVyLWZwckBub3RhdGlvbnMub3Bl
bnBncC5maWZ0aGhvcnNlbWFuLm5ldEM2NzU5RjUyMDczREJDQkVDQTBDRkE1NERC
Nzk1QThBNDI2MTgzNTQACgkQ23laikJhg1SKEgCeLuRlJxXSQFNDpVH23uXlrBEQ
tFcAnRLbKzzL5KSWHpfu4LX0SxJA0jWA
=92Vy
-----END PGP SIGNATURE-----
next prev parent reply other threads:[~2014-01-09 15:45 UTC|newest]
Thread overview: 16+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-01-08 1:14 [gentoo-security] Soliciting feedback for the GLSA-2 format Alex Legler
2014-01-08 1:40 ` Tobias Heinlein
2014-01-08 1:42 ` Tobias Heinlein
2014-01-09 0:08 ` Chris Reffett
2014-01-09 15:42 ` Alex Legler
2014-01-09 15:44 ` Chris Reffett [this message]
2014-01-09 15:08 ` Alex Legler
2014-01-09 23:37 ` Yury German
2014-01-10 1:35 ` Tobias Heinlein
2014-01-10 2:42 ` Yury German
2014-01-10 8:27 ` Kristian Fiskerstrand
-- strict thread matches above, loose matches on Subject: below --
2014-01-10 15:02 Sascha Wolf
2014-01-10 15:05 ` Alex Xu
2014-01-10 15:44 ` Tobias Heinlein
2014-01-15 11:14 ` Sergey Popov
2014-01-10 20:00 Ivan
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=52CEC3E5.8060305@gentoo.org \
--to=creffett@gentoo.org \
--cc=gentoo-security@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox