Subject: Re: OpenSSL incident tracking...
To: Sean Davis <dive@endersgame.net>
From: Jason R Thorpe <thorpej@wasabisystems.com>
List: tech-security
Date: 08/02/2002 20:28:07
On Fri, Aug 02, 2002 at 10:35:50PM -0400, Sean Davis wrote:

 > I don't think I would go so far as to say the NetBSD project does not care
 > about security. I do believe the delay in releasing security advisories is
 > worthy of criticism if other systems put out advisories within hours,
 > however.

The delay in releasing the SA was due to figuring out how to deal with
the problem on the netbsd-1-6 branch (which is near the end of the
release cycle).

-- 
        -- Jason R. Thorpe <thorpej@wasabisystems.com>