[prev in list] [next in list] [prev in thread] [next in thread] 

List:       oss-security
Subject:    Re: [oss-security] CVE-2022-21449 and version reporting
From:       Jeremy Stanley <fungi () yuggoth ! org>
Date:       2022-04-30 19:43:32
Message-ID: 20220430194331.k6wx35pjrvoi4qqd () yuggoth ! org
[Download RAW message or body]


On 2022-04-28 22:40:23 +0200 (+0200), Sven Schwedas wrote:
[...]
> You and Jeremy arguing in bad faith here, OP didn't ask about
> anything like that.
[...]

"Bad faith" doesn't mean what you seem to think it means, unless you
really believe I'm shilling for Oracle in order to mislead or
defraud you in some way. I'll tell you straight up, though, I
personally have no connection to Oracle nor have they ever funded my
work in any way.

If you've got concerns with how Oracle handles their vulnerability
reporting, I would take that as an indication to stop using their
software. That's what I do when I don't trust someone. Expecting
MITRE to set some requirements for how everyone is allowed to report
vulnerabilities for unsupported versions of software is not
something I can get behind, though.
--=20
Jeremy Stanley

["signature.asc" (application/pgp-signature)]

[prev in list] [next in list] [prev in thread] [next in thread]