This is an automated email from the git hooks/post-receive script.

Git pushed a commit to branch master
in repository ffmpeg-web.

The following commit(s) were added to refs/heads/master by this push:
     new ba01e80  src/security: Adjusting prompt about fixes
ba01e80 is described below

commit ba01e809d6f131ee4457e84fa5d2a936b6c9aafd
Author:     Michael Niedermayer <[email protected]>
AuthorDate: Tue Sep 22 01:29:51 2026 +0200
Commit:     michaelni <[email protected]>
CommitDate: Tue Sep 22 16:55:01 2026 +0000

    src/security: Adjusting prompt about fixes
    
    The previous resulted in narrated changes in place of patches
---
 src/security | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/src/security b/src/security
index 4792b0c..455d849 100644
--- a/src/security
+++ b/src/security
@@ -17,7 +17,13 @@ And that you provide a easy to use testcase. Automated 
submissions are not accep
   <li>An analysis / description of the issue, only if you understand and have 
validated it. Please distinguish the root cause from symptoms or 
workarounds.</li>
   <li>The commit that introduced the vulnerability, if known.</li>
   <li>A script generating the input, if available.</li>
-  <li>A git-formatted patch with a proposed fix, only if you fully understand 
the issue and have personally developed and validated the fix. Do not submit 
LLM-generated or substantially LLM-written fixes; these create additional 
review and attribution work for us.</li>
+  <li>
+  Do not include fix suggestions in prose, pseudocode, code snippets, or
+  partial patches. The only exception is a complete git-formatted patch,
+  manually developed, fully understood, reviewed and tested by its human
+  author, and ready to apply without changes. LLM-generated patches are
+  not accepted. a fix is not required to report a vulnerability.
+  </li>
   <li>Any CVE identifier or other related identifier, if available.</li>
 </ol>
 

-- 
To stop receiving notification emails like this one, please contact
[email protected].
_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to