Community mailing list archives
Re: Security - Odoo enterprise - DB accessby
I think Odoo Official treats the security in a right way. 1st of all the patch is provided to the enterprise users and the security breach details will be published later. To publish a security breach without a remedy would encourage the hackers to use the bug in the system and harm the true users.
we send them an email, along with a patch a few weeks before we disclosed the security breach publicly.