Comment 12 for bug 1227027

Revision history for this message
Jeremy Stanley (fungi) wrote : Re: Insecure directory permissions with snapshot code

Kurt: Probably. We don't usually request a CVE until we have a clear impact description and the patches which correct it in supported releases are mostly complete/ready to be reviewed, so that we don't have to go back later with revisions or retractions. If you're okay with us requesting CVEs before we're clear on the direction we're taking, we can probably see about revising our workflow ask for them earlier in the process.