1
0
mirror of https://git.FreeBSD.org/doc.git synced 2026-06-02 19:35:07 +00:00

Vulnerability reporting: Ask for more information

- Extend "Example code" to reference PoC explicitly
- Preferred "Credits" attribution
- AI use

Reviewed by:	markj, oshogbo
Sponsored by:	The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D56861
This commit is contained in:
Ed Maste
2026-05-06 16:23:59 -04:00
parent c06ad42897
commit cbd9256f85
+3 -1
View File
@@ -27,7 +27,9 @@ All reports should contain at least:
* A description of the vulnerability.
* What versions of FreeBSD seem to be affected if possible.
* Any plausible workaround.
* Example code if possible.
* Example code if possible, including a minimal, self-contained proof of concept (PoC) where feasible.
* The reporter's preferred form of attribution for the "Credits" line in any resulting Security Advisory, if desired.
* Whether any automated tools or artificial intelligence systems were used as part of the discovery process, and if so, which tools or models.
Whenever possible, including the background, problem description, impact, and workaround (if applicable) using the templates for link:../advisory-template.txt[security advisories] and link:../errata-template.txt[errata notices] as appropriate would also be helpful.