[Mesa-dev] Proposal: allow hidden security bugs on Mesa's Bugzilla

[Alan Coopersmith]

On 11/20/12 09:29 AM, Benoit Jacob wrote:
> Both solutions are poor, and a better solution would be for Mesa's
> bugzilla to allow hidden security bugs so we could work there. Given
> that security bug discussion can't be open, that is the "least bad"
> solution possible.

For what it's worth, Mesa wouldn't be the first project on the freedesktop
bugzilla to enable this - security bugs filed against X.Org software are
kept private to the X.Org security team until we publish our advisory.

-- 
	-Alan Coopersmith-              alan.coopersmith at oracle.com
	 Oracle Solaris Engineering - http://blogs.oracle.com/alanc