Willy Tarreau <[email protected]> writes: > This series tries to translate recent discussions on the security list > on how to better handle reports. It details: > - when not to Cc: the security list > - what classes of bugs do not need to be handled privately > - minimum requirements for AI-assisted reports > > As usual, this is probably perfectible but can already help in the short > term as we can point it to reporters, so barring any strong disagreement, > better continue to proceed in small incremental improvements and observe > the effects.
OK, I've applied the series to docs-fixes; after a short exposure in linux-next I'll ship it Linusward. I have a couple of comments on the individual changes that might merit an eventual add-on patch. Thanks, jon
