2 ms·
Did I miss something regarding that Maxim didn't want CVEs and disclosures? I was not aware of this. And F5 are the ones wanting to add the CVEs (as happened in
by qwertox 3y ago
Did I miss something regarding that Maxim didn't want CVEs and disclosures? I was not aware of this. And F5 are the ones wanting to add the CVEs (as happened in the announcement which was released an hour earlier)?
I could have sworn that I've read about Nginx CVEs in the past.
- xcrunner529 3y agoWell it seems he didn’t think this particular thing should have one despite the criteria being clear.
- qwertox 3y agoI did miss the post [1] where he explains that experimental features should not get assigned a CVE if the feature is experimental. In that case I'd agree with his view, though I think his reaction is a bit over the top. [0] https://freenginx.org/pipermail/nginx/2024-February/000007.html https://freenginx.org/pipermail/nginx/2024-February/000007.h...