3 ms·
Just mark CVEs as bugs and get to them when you can. In this case, if Google doesn't like it, then so be it. It'll get fixed eventually. Don't like how long it
by warmwaffles 11mo ago
Just mark CVEs as bugs and get to them when you can. In this case, if Google doesn't like it, then so be it. It'll get fixed eventually. Don't like how long it takes? Pay someone to contribute back. Until then, hurry up and wait.
- adastra22 11mo agoThat’s how you get your open source software removed from distributions and eventually forked.
- cubefox 11mo agoForked by people who are quicker at fixing security vulnerabilities than the original maintainers?
- adastra22 11mo agoSure, for some definition of “vulnerability.” And only doing that, nothing more.
- warmwaffles 11mo agoAnd that's a problem?