[FD] CVEs based on commit messages

2024-01-27 Thread Mark Esler
r bug is a vulnerability? What impact are you hoping to achieve? Please reconsider how you are requesting CVEs. CVE assignment based on commit message allows unscrupulous comitters to take advantage of CNAs who do so and _print CVEs_ for their resume. Kind regards,

Re: [FD] null pointer deference in nano via read_the_list()

2024-01-27 Thread Mark Esler
Hi Meng, In your recent mass posts to FD, are you reporting vulnerabilities or bug reports which have words like "segfault" in the title? What benefit do you see this having? Have you spoken to each upstream project before requesting a CVE be assigned? Thank you, Mark Esler On