A list of publicly known but unfixed security bugs

> These packages exist in a state of permanent insecurity because they don't keep up with the ~6-week browser update cycle.

I was expecting this to be a list of known issues of some severity that hadn't been fixed. This seems to be a general criticism of projects, one of which has seen its maintainer step down.

It's just a dumb laundry list without clear place for any details if I wanted to add any. For example recent versions of KDE Konsole terminal emulator do the pasting right - the text is first displayed highlighted and really gets pasted only when you press Enter.

It would be nice if they were grouped by severity (remote exploits vs phishing vs user interface bugs, for example)

At least with Windows, UAC isn't considered a security boundary by Microsoft, it's more of a generic item there to make users aware that the software they are going to run is asking for special permissions.

I like this, this could be useful. The easier it is to access this kind of information the better.