* Martin Winter:

> Document Revision History:
> 1.0  22 September 2016 - Initial (internal) draft
> 1.1  18 October 2016   - CVE release version

Why didn't you coordinate the disclosure with distributions?

Debian assigned a CVE ID to you in good faith, but the promised
coordination never happened.  We never received the details of the
vulnerability, nor the planned disclosure date.

Quagga-users mailing list

Reply via email to