"The GNOME project is changing its handling of security reports due to the influx of AI/LLM-generated security findings. [...] GNOME will be moving to a 30 day disclosure window rather than the industry 90 day period. [...] Another change being made is that for projects that prohibit AI-generated content, security issues will no longer be forwarded to them. Due to many security reports these days containing AI/LLM-generated findings and in turn violate individual project policies around no AI contributions, the issues will be just immediately closed instead in the tracker. Project maintainers will be pinged if they want to be aware at least of the findings."
"The GNOME project is changing its handling of security reports due to the influx of AI/LLM-generated security findings. [...] GNOME will be moving to a 30 day disclosure window rather than the industry 90 day period. [...] Another change being made is that for projects that prohibit AI-generated content, security issues will no longer be forwarded to them. Due to many security reports these days containing AI/LLM-generated findings and in turn violate individual project policies around no AI contributions, the issues will be just immediately closed instead in the tracker. Project maintainers will be pinged if they want to be aware at least of the findings."