Those Bugs

Nmap Announce Nmap Dev Full Disclosure Security Lists Internet Issues Open Source Dev oss-sec mailing list archives From: Greg KH <gregkh () linuxfoundation org> Date: Mon, 16 May 2022 18:54:00 +0200 On Mon, May 16, 2022 at 10:43:33AM -0300, Thadeu Lima de Souza Cascardo wrote: Correct. That is correct. That is correct, the kernel security "team" puts no rules or requirements on anyone who submits stuff to us.

Nmap Announce Nmap Dev Full Disclosure Security Lists Internet Issues Open Source Dev oss-sec mailing list archives From: Thadeu Lima de Souza Cascardo <cascardo () canonical com> Date: Mon, 16 May 2022 10:43:33 -0300 On Mon, May 16, 2022 at 03:12:20PM +0200, Jason A. Donenfeld wrote: [...] Though I want to add a little more to this discussion, I think this needs clarification and is really one of the main pain points here, in my opinion.

Nmap Announce Nmap Dev Full Disclosure Security Lists Internet Issues Open Source Dev oss-sec mailing list archives From: "Jason A. Donenfeld" <Jason () zx2c4 com> Date: Mon, 16 May 2022 15:12:20 +0200 Hi Alexander, I think a lot of this depends on what you feel the primary value in distros@ is. I always thought its primary purpose was to centralize embargoed vulnerability reports, using its presence as *the* de facto forum for that, in order to receive nearly all embargoed bugs.