Re: security-tracker: A proposal to significantly reduce reported false-positives (no affected-code shipped)

Samuel Henrique <[email protected]> Sun, 13 Apr 2025 16:06:38 +0100
Newsgroups gmane.linux.debian.devel.security
Message-ID <ex5wntkdvkihjwinbzwj33iewloaerbtaft5upczp6bhv4vu5j@ir4yvvm5n66e>
Hello everyone,

On Sun, 2 Mar 2025 at 20:26, Samuel Henrique <[email protected]> wrote:
> Just checking if you would have time to look into this.

Sending another ping, this proposal is now 1 year old.

For clarity, I'm not requesting the team to do any work here. I can work on the
changes, I just need a decision on the solution.

Personally, I have it as a high priority to cut down those 20% false-positive
CVEs reported for Debian containers, since a lot of official containers are
based on us, but this will also help non-container users.

I'm hoping that sending this is fine, but let me know if I should have waited
more than a month from the previous message.

Regards,

--
Samuel Henrique <samueloph>