[amluto]

Max did everything right here, and in this case I’m not sure the distribution process exists to have done better.

(Thanks Max for handling this well and politely and for putting up with everyone’s conflicting opinions.)

[staticassertion]

FWIW, if it in any way comes off like I'm blaming Max for this, I'm not. Anyone blaming Max for how vulnerabilities are disclosed is completely ignorant of the kernel reporting process.

[MauranKilom]

Just wanted to note that your replies come off as quite confrontational/aggressive. I think you have valid points, and it's clear that this topic is important to you, but you're heating up the atmosphere of the thread more than necessary.

[staticassertion]

That part I'm ok with. Upstream has treated security researchers with contempt for decades.