Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
Re: [Full-disclosure] Re: what we REALLY learned from WMF
From: Devdas Bhagat (devdasdvb.homelinux.org)
Date: Fri Jan 06 2006 - 10:12:07 CST
On 05/01/06 16:07 -0800, Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] wrote:
> If the security issue has been responsible disclosed, there is a process
> that is needed to build a patch and test the patch. Some issues take
> more than 'days' sir. And testing takes time as well, sir.
A question for people who find such exploitable bugs and report them
How many days does it take for upstream to patch and release bugfix?
It would be nice if you could include the severity of the bug as well.
(Vendor and product names, product versions would be nice as well).
Quite a few of us generally get to know only when the fix is released.
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/