![2 Edit Post Jason Neylon's Bl X .Jasonneylon/dotfiles-GitHu ← → https://github.com/Jasonneylon/dotfiles/ Ruby on Rails Tutor Campfire: Rev HTML5 Presentation Bu FlashwavRecorder java-How does one web development-i D later D Readability Other Bookmarks E » iasonneylon Dashboard Inbox Account Settings Log Out github SOCIAL CODING Explore GitHub Gist Blog Help Search jasonneylon / dotfiles Admin Unwatch Forku Pull Request 1 4 1 eimim Source Commits Network Pull Requests (0) Fork Queue Issues (0) Wiki (0) Graphs Branch: master Switch Branches (1)Switch Tags (O) ranch List My dotfiles click here to add a homepage Downloads SSH HTTP Git Read-Only gitegithub.com:jasonneylon/dotfiles.git This URL has Read-Write access commit 3608b9709255477210f1 tree faa205ca9c53e6dØfe61 parent ec82447a9f47e4d7b4a1 Minor tweak to github function jasonneylon (author) 15 minutes ago dotfiles / name history age about an hour ago 2 days ago 2 days ago message My first bash function [jasonneylon] Moved stuff around [jasonneylon] Added base files Ljasonneylon bash/ env git-completion.sh](https://i.kym-cdn.com/photos/images/original/000/963/911/02d.png "Github Repo Screenshot")
Github Repo Screenshot
Uploaded by Ari Spool May 15, 2015 at 11:31AM EDT
Origin Entry: GitHub
File type: png
Resolution: (1191px x 815px)
File size: 229 KB
![shantanu-vsbhosale commented on May 26 [context: a library we ship with mitmproxy has a vulnerability in parts not used by mitmproxy, so it does not not affect our users] @Prinzhorn @mhils Just curious why are we not releasing the fix even though CVE-2023-0286 is a High severity vulnerability ? Developers who are already using library cryptography > 39.0.1 won't be able to use mitmproxy. Other libraries have already released the fix. For example, https://pypi.org/project/pyOpenSSL/23.1.0/ Prinzhorn commented on May 26 # 5966 (comment) I don't think either of the posted vulnerabilities affects mitmproxy users in a significant way, so I don't think we will ship a patch release just for that. :) FrugalGuy commented yesterday 28 @Prinzhorn Do you have a target date for the next release? Our customers in regulated industries (banking, federal, etc.) are prohibited by regulations from using s/w with known High and Critical severity vulnerabilities. I'm trying to formulate our case for waiting, but need some kind of target date. mhils commented yesterday 36 @FrugalGuy: If you are interested in timely patch releases to fix your company's compliance requirements, I'm happy to set up a support contract. Email is on my profile. :-) 18 3. mitmproxy locked as too heated and limited conversation to collaborators 10 hours ago Concerning response > Inbox x to github@hi.ls ▾ Mr. Hils, mhils commented Member @us.ibm.com> Jul 14, 2023, 11:56 PM (14 hours ago) hours ago Rather than inflame matters or pollute the github issue tracker with unnecessary verbiage, I'm hoping to better explain my request for a target date in hopes of getting a direct answer. I hope you won't find this follow-up to be offensive - that's certainly not my intention. Member I'm assuming your response to my request for the next mitmproxy target date was a joke rather than an official project response or, worse, a thinly veiled extortion attempt. In reviewing the project's official documentation, mhils commented 9 hours ago Reply to all I @FrugalGuy has just sent me genuine apology, which I truly appreciate. Please be nice and assume good intentions. Since this has been picked up by some news sites I'd like to provide some additional context here: I don't mind the release question at all, it's valid! But the context should ideally be along the lines of "we have an interest in this, how can we help make it happen" (contributions or $) and not "you are causing problems for our customers". I don't want the requestor to have a miserable time because of a badly-worded comment, I want large companies to have a healthy relationship with FOSS. Member Member](https://i.kym-cdn.com/photos/images/list/002/622/952/499.png "IBMer asks for a patch release date in the worst possible way")
More:
Comments (0)
Add a Comment
Image Details
167 views (11 from today)
Uploaded May 15, 2015 at 11:31AM EDT
Origin Entry
Tags
About the Uploader
Ari Spool
The Mayor
There are no comments currently available.
Display Comments