David Miller wrote:
CERT is asking these vendors for "approval" for the text they will add
mentioning anything about their product. That's the bit I'm talking
about.
They are getting protection and consideration that was not really
afforded to GCC.
CERT treated GCC differently.
This is not true. The "Statement" section of the vendor status is for
official, usually verbatim, statements from the vendor. The "Addendum"
section is reserved for our own comments, even those that may contradict
the vendor's response if we have reason to do so.
You'll note that the suggestion about _considering_ using older versions
of gcc appears in the addendum.
-Chad