News for hackers. Stuff that matters.

A comment on Libxml2's "no security embargoes" policy. Parent comment

Re:Libxml2's "no security embargoes" policy by bastawhiz on Thursday June 26, 2025 @02:46PM (#44390156)
Who should be liable? The person who sells you the software? Or the person who put some code on GitHub that the first guy used?
[ Parent | on HN ]
Re:Libxml2's "no security embargoes" policy by pjmlp on Friday June 27, 2025 @01:25AM (#44393910)
In principle the guy that sells the software, that is why now SBOMs (Software Bill of Materials) are a thing in security assessments.
[ Parent | on HN ]