Messages in this thread | | | Date | Mon, 3 Jul 2023 21:35:11 +0200 | From | Willy Tarreau <> | Subject | Re: [PATCH 2/2] Documentation: security-bugs.rst: clarify CVE handling |
| |
On Mon, Jul 03, 2023 at 12:26:32PM -0700, Kees Cook wrote: > I still think this version of the sentence is more readable: > > However under no circumstances will patch publication be delayed for > CVE identifier assignment. > > "patch inclusion" is less clear to me that "publication", and "be > delayed to wait for" is redundant: a delay is a wait, and "to arrive" > is just the assignment, which is the subject of the paragraph, so better > to keep the language for that consistent.
I agree, I find it better as well :-)
Thanks, Willy
| |