mirror of
https://git.FreeBSD.org/doc.git
synced 2026-06-02 19:35:07 +00:00
Vulnerability reporting: Ask for more information
- Extend "Example code" to reference PoC explicitly - Preferred "Credits" attribution - AI use Reviewed by: markj, oshogbo Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D56861
This commit is contained in:
@@ -27,7 +27,9 @@ All reports should contain at least:
|
||||
* A description of the vulnerability.
|
||||
* What versions of FreeBSD seem to be affected if possible.
|
||||
* Any plausible workaround.
|
||||
* Example code if possible.
|
||||
* Example code if possible, including a minimal, self-contained proof of concept (PoC) where feasible.
|
||||
* The reporter's preferred form of attribution for the "Credits" line in any resulting Security Advisory, if desired.
|
||||
* Whether any automated tools or artificial intelligence systems were used as part of the discovery process, and if so, which tools or models.
|
||||
|
||||
Whenever possible, including the background, problem description, impact, and workaround (if applicable) using the templates for link:../advisory-template.txt[security advisories] and link:../errata-template.txt[errata notices] as appropriate would also be helpful.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user