In this session, guest speaker Marta Rybczynska from the Eclipse Security Team started with a refresher on the vulnerability reporting and handling process from the committer’s perspective. Then she reviewed take-aways from the new CNA rules covering common situations, including how you determine whether or not a specific bug is a vulnerability.
Projects
The Eclipse Foundation is home to the Eclipse IDE, Jakarta EE, and hundreds of open source projects, including runtimes, tools, specifications, and frameworks for cloud and edge applications, IoT, AI, automotive, systems engineering, open processor designs, and many others.
Supporters
The Eclipse Foundation is an international non-profit association supported by our members, including industry leaders who value open source as a key enabler for their business strategies.
Membership
Sponsorship
Collaborations
Whether you intend on contributing to Eclipse technologies that are important to your product strategy, or simply want to explore a specific innovation area with like-minded organizations, the Eclipse Foundation is the open source home for industry collaboration.
Industry Collaborations
Research Collaborations
Resources
The Eclipse community consists of individual developers and organizations spanning many industries. Stay up to date on our open source community and find resources to support your journey.
Open Source for Business
What's Happening
Developer Resources
The Foundation
The Eclipse Foundation provides our global community of individuals and organizations with a mature, scalable, and vendor-neutral environment for open source software collaboration and innovation.
- Home
- Blogs
- Eclipse Management Organization's blog
- Vulnerability Reporting and Security for Eclipse Projects
