Re: CVEs in contrib extensions

2023-09-07 Thread Abhishek Agarwal
ishek Agarwal > wrote: > > > Hello all > > What is our current policy about addressing CVEs in contrib extensions if > > we have one? As of now, before the release, the release manager will > either > > try to fix the CVEs or add a suppression if applicable. U

Re: CVEs in contrib extensions

2023-09-05 Thread Gian Merlino
, Sep 4, 2023 at 3:02 AM Abhishek Agarwal wrote: > Hello all > What is our current policy about addressing CVEs in contrib extensions if > we have one? As of now, before the release, the release manager will either > try to fix the CVEs or add a suppression if applicable. Unless any

CVEs in contrib extensions

2023-09-04 Thread Abhishek Agarwal
Hello all What is our current policy about addressing CVEs in contrib extensions if we have one? As of now, before the release, the release manager will either try to fix the CVEs or add a suppression if applicable. Unless any developer has done that same work before the release process begins