Re: security-tracker: A proposal to significantly reduce reported false-positives (no affected-code shipped)
Samuel Henrique <[email protected]> Sun, 13 Apr 2025 16:06:38 +0100
| Newsgroups | gmane.linux.debian.devel.security |
|---|---|
| Message-ID | <ex5wntkdvkihjwinbzwj33iewloaerbtaft5upczp6bhv4vu5j@ir4yvvm5n66e> |
Hello everyone, On Sun, 2 Mar 2025 at 20:26, Samuel Henrique <[email protected]> wrote: > Just checking if you would have time to look into this. Sending another ping, this proposal is now 1 year old. For clarity, I'm not requesting the team to do any work here. I can work on the changes, I just need a decision on the solution. Personally, I have it as a high priority to cut down those 20% false-positive CVEs reported for Debian containers, since a lot of official containers are based on us, but this will also help non-container users. I'm hoping that sending this is fine, but let me know if I should have waited more than a month from the previous message. Regards, -- Samuel Henrique <samueloph>