On Wed, 14 Feb 2024, Greg Kroah-Hartman wrote: > The people that make up the current team, Lee, Sasha, and I, have a LONG > history of fixing and triaging and managing security bugs for the > kernel, in the community and in corporate environments. We know how to > do this as we have been doing it for decades already. Thanks for clarifying. Maybe the wording could use some more verbosity then; one of my potential readings of it was "everything that gets picked for -stable will get a CVE assigned". > If you or anyone else wishes to help us out with this classification, we > can gladly use the help. Thanks, but no, thanks, I want to stay away from the CVE tragedy as far as possible :) -- Jiri Kosina SUSE Labs