Hacker News new | ask | show | jobs
by insanitybit 1330 days ago
Attackers can just go look at the repo's commits. Holding back the information only hurts defenders.
1 comments
macintux 1330 days ago
It seems unlikely to me that the maintainers are that careless.
link
insanitybit 1330 days ago
It is the norm for the patch to be committed and the CVE to be acquired as part of that process.
link
macintux 1329 days ago
Yep, per this comment my optimism was misplaced.

https://news.ycombinator.com/item?id=33384596

link
macintux 1329 days ago
Or, it appears I may have been correct the first time.

https://news.ycombinator.com/item?id=33382684

link
insanitybit 1329 days ago
That's cool. Some projects do that, some do not.
link