undefined | Better HN

0 pointsqwertox2y ago0 comments

Did I miss something regarding that Maxim didn't want CVEs and disclosures? I was not aware of this. And F5 are the ones wanting to add the CVEs (as happened in the announcement which was released an hour earlier)?

I could have sworn that I've read about Nginx CVEs in the past.

0 comments

xcrunner5292y ago

Well it seems he didn’t think this particular thing should have one despite the criteria being clear.

qwertoxOP2y ago

I did miss the post [1] where he explains that experimental features should not get assigned a CVE if the feature is experimental.

In that case I'd agree with his view, though I think his reaction is a bit over the top.

[0] https://freenginx.org/pipermail/nginx/2024-February/000007.h...

j / k navigate · click thread line to collapse