Re: CVE REJECT noise

[Kurt Seifried <kseifried () redhat com>]

On Wed, Aug 19, 2015 at 3:42 PM, Solar Designer <solar () openwall com> wrote:

> All -
>
> Can we please agree that CVE REJECT postings such as those Kurt has been
> occasionally making in here for a while are not to be made anymore?  To
> me, and I suspect to almost(?) all other oss-security subscribers, they
> are just noise.  I mean things like this:
Stupid question but who is "We"? I mean it's your list and if you want me
to definitely not post these, I can respect that no problem, OTOH if you're
looking for community consensus I doubt that'll happen in any meaningful
way (bike shedding is the most likely outcome). Mitre people: is it
sufficient if I privately inform you of such CVE rejects so they can be put
int he database?


-- 

--
Kurt Seifried -- Red Hat -- Product Security -- Cloud
PGP A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
Red Hat Product Security contact: secalert () redhat com