This is the mail archive of the gcc@gcc.gnu.org mailing list for the GCC project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: US-CERT Vulnerability Note VU#162289


David Miller wrote:
CERT is asking these vendors for "approval" for the text they will add
mentioning anything about their product.  That's the bit I'm talking
about.

They are getting protection and consideration that was not really
afforded to GCC.

CERT treated GCC differently.

This is not true. The "Statement" section of the vendor status is for official, usually verbatim, statements from the vendor. The "Addendum" section is reserved for our own comments, even those that may contradict the vendor's response if we have reason to do so.


You'll note that the suggestion about _considering_ using older versions of gcc appears in the addendum.

-Chad


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]