oss-sec mailing list archives

Some Changes to GNOME Security Tracking


From: Alan Coopersmith <alan.coopersmith () oracle com>
Date: Thu, 30 Jul 2026 14:41:15 -0700

https://blogs.gnome.org/mcatanzaro/2026/07/20/some-changes-to-gnome-security-tracking/
announces some changes to the GNOME project's security bug handling:

1) The disclosure deadline is cut from 90 days to 30 days, as most
   GNOME maintainers that fix bugs during the embargo do so within
   the first 30 days.  This is effective for new bugs reported starting
   August 1.

2) The GNOME security team will no longer forward vulnerability reports
   to projects that ban AI-generated content, since most reports they
   get these days have at least some AI-generated content.

3) Michael Catanzaro will be stepping down in November, after 6 years
   of handling this work for GNOME.  He's looking for someone to step
   up to replace him.

--
        -Alan Coopersmith-                 alan.coopersmith () oracle com
         Oracle Solaris Engineering - https://blogs.oracle.com/solaris


Current thread: