[PATCH] Update link in SECURITY.md.
Florian Weimer
fweimer@redhat.com
Wed Apr 29 08:24:37 GMT 2026
* Collin Funk:
> The cve.mitre.org site is an archive that redirects users to cve.org.
> The linked about page has also been removed, so this patch changes it to
> reference the current equivalent on cve.org.
> ---
> SECURITY.md | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/SECURITY.md b/SECURITY.md
> index e0f68f1ecb..82275a5f6f 100644
> --- a/SECURITY.md
> +++ b/SECURITY.md
> @@ -170,7 +170,7 @@ the bug, the fix, or the mailing list discussions.
> ## CVE assignment
>
> Security bugs flagged with `security+` should have [CVE
> -identifiers](http://cve.mitre.org/about/). Please reach out to the glibc
> +identifiers](https://www.cve.org/About/Overview). Please reach out to the glibc
> security team using the documented [security
> process](https://sourceware.org/glibc/security.html) and they work on getting a
> CVE number.
Looks reasonable.
Reviewed-by: Florian Weimer <fweimer@redhat.com>
Thanks,
Florian
More information about the Libc-alpha
mailing list