Subject: Re: OpenSSL incident tracking...
To: Sean Davis <dive@endersgame.net>
From: Jason R Thorpe <thorpej@wasabisystems.com>
List: tech-security
Date: 08/02/2002 20:28:07
On Fri, Aug 02, 2002 at 10:35:50PM -0400, Sean Davis wrote:
> I don't think I would go so far as to say the NetBSD project does not care
> about security. I do believe the delay in releasing security advisories is
> worthy of criticism if other systems put out advisories within hours,
> however.
The delay in releasing the SA was due to figuring out how to deal with
the problem on the netbsd-1-6 branch (which is near the end of the
release cycle).
--
-- Jason R. Thorpe <thorpej@wasabisystems.com>