3 ms·
I mean I’m not sure how it’s good to want to move to a dev who is against CVEs and disclosures…
by xcrunner529 3y ago
I mean I’m not sure how it’s good to want to move to a dev who is against CVEs and disclosures…
- spydum 3y agoI think people are seeing this as a very generic "big bad globocorp destroying OSS community", and not moving past the headlines. I'm with you, this seems like a foolish thing to decide to fork the project over. Probably there is other conflict brewing, and this was just a convenient opportunity.
- qwertox 3y agoDid I miss something regarding that Maxim didn't want CVEs and disclosures? I was not aware of this. And F5 are the ones wanting to add the CVEs (as happened in the announcement which was released an hour earlier)? I could have sworn that I've read about Nginx CVEs in the past.
- xcrunner529 3y agoWell it seems he didn’t think this particular thing should have one despite the criteria being clear.
- qwertox 3y agoI did miss the post [1] where he explains that experimental features should not get assigned a CVE if the feature is experimental. In that case I'd agree with his view, though I think his reaction is a bit over the top. [0] https://freenginx.org/pipermail/nginx/2024-February/000007.html https://freenginx.org/pipermail/nginx/2024-February/000007.h...