[PATCH] Update link in SECURITY.md.

Florian Weimer fweimer@redhat.com
Wed Apr 29 08:24:37 GMT 2026


* Collin Funk:

> The cve.mitre.org site is an archive that redirects users to cve.org.
> The linked about page has also been removed, so this patch changes it to
> reference the current equivalent on cve.org.
> ---
>  SECURITY.md | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/SECURITY.md b/SECURITY.md
> index e0f68f1ecb..82275a5f6f 100644
> --- a/SECURITY.md
> +++ b/SECURITY.md
> @@ -170,7 +170,7 @@ the bug, the fix, or the mailing list discussions.
>  ## CVE assignment
>  
>  Security bugs flagged with `security+` should have [CVE
> -identifiers](http://cve.mitre.org/about/). Please reach out to the glibc
> +identifiers](https://www.cve.org/About/Overview). Please reach out to the glibc
>  security team using the documented [security
>  process](https://sourceware.org/glibc/security.html) and they work on getting a
>  CVE number.

Looks reasonable.

Reviewed-by: Florian Weimer <fweimer@redhat.com>

Thanks,
Florian



More information about the Libc-alpha mailing list