[Phpmyadmin-devel] phpMyAdmin 2.11.5 and security announcement

Thijs Kinkhorst thijs at debian.org
Mon Mar 3 16:14:55 CET 2008


On Monday 3 March 2008 16:06, Sebastian Mendel wrote:
> ups, this was not my aim, i did not want to overhelm you or impose it
>
> i really just wanted to discuss this and fully respect your decisions as
> release manager and admin (and personal)!

Just for the record (and as a member of the Debian security team): hiding 
details of a vulnerability hinders those wanting to fix it, while the bad 
guys indeed have much time and expertise anyway... fully agreed that this is 
the right choice.


Thijs
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 481 bytes
Desc: not available
URL: <http://lists.phpmyadmin.net/pipermail/developers/attachments/20080303/460c3d3e/attachment.sig>


More information about the Developers mailing list