On Fri, Apr 29, 2011 at 10:24 AM, Sean McGovern <[email protected]> wrote: > Much though I think we dislike the way this has been reported, I believe > Michael's behaviour in this instance is correct. Publication of the > vulnerability has a potentially negative effect on _both_ projects. > Additionally, a patch has been committed to FFmpeg that while it is not > really my say, should still be committed to LibAV a.s.a.p. if it mitigates a > security issue. >
Letting the Libav developers know details of the slow has "a potentially negative effect on _both_ projects." Really? No one asked for a widespread publication of the details. --Alex _______________________________________________ libav-devel mailing list [email protected] https://lists.libav.org/mailman/listinfo/libav-devel
