Stenberg: DISPUTED, not REJECTED

Posted Feb 26, 2024 14:19 UTC (Mon) by hkario (subscriber, #94864)
In reply to: Stenberg: DISPUTED, not REJECTED by ewen
Parent article: Stenberg: DISPUTED, not REJECTED

> But the curl project and others are right that the CVE system is pretty broken. And basically designed for the opposite of today’s situation, ie designed to track good faith reports against vendors unwilling to fix real problems.

those vendors haven't gone away, Microsoft is still operating very much in this way, and I'm sure there are plenty others