January 10, 2022 6:31:37 AM CET Salvatore Bonaccorso <car...@debian.org> wrote:
> We are going to stop anyway at some point displaying the NVD severity, for > context see #992115. As I see it, Debian should be free to display or not display NVD ratings, but it shouldn't display the incorrect "medium" NVD ratings, when they are actually much worse, as it's been doing. In fact, I think it should issue a public retraction. Any progress on my original proposal? Are the wheels in motion? https://lists.debian.org/debian-security/2021/12/msg00002.html https://lists.debian.org/debian-security/2022/01/msg00002.html I can't help but feel that it's a 15 second job for anyone with write access to the site, and the reprehensibility of the current claims should be obvious to those with a working moral compass. -- Sent with https://mailfence.com Secure and private email