@sethmlarson @joshbressers yeah, I understand if projects don't want to release CVEs for unsupported releases due to the amount of work, but the value of doing so is there. It paints a clear picture of the state of the old releases and lets distributors be aware that they need to fix it themselves. More information is always good.
=> More informations about this toot | View the thread | More toots from samueloph@mastodon.social
=> View sethmlarson@fosstodon.org profile | View joshbressers@infosec.exchange profile
text/geminiThis content has been proxied by September (3851b).