Group Proposal, for further discussion: Vulnerability Group

Volker Simonis volker.simonis at
Mon Feb 5 17:38:14 UTC 2018

On Wed, Jan 31, 2018 at 5:44 PM,  <mark.reinhold at> wrote:
> (This is not a call for votes; it is just a call for discussion.)
> To follow up on my initial call for discussion last August [1], I've
> posted a revised proposal for the Vulnerability Group together with
> the final version of the non-disclosure and license agreement, and
> diffs of the final version with respect to the first version:
> The only change to the proposal itself is to add a link to define the
> term "rough consensus," as suggested by Volker [2].

Thanks for considering my suggestion. I actually didn't expected that
the definition of "rough consensus" will be longer than the entire
"OpenJDK Vulnerability Group" proposal, but rough consensus seems to
be a complex topic :)

The final agreement is under review. I'll let you know once it's done
and we can finally sign it.


> I'll propose to create the Vulnerability Group in one week, after
> prospective initial Group Members have had time to review the final
> agreement.
> - Mark
> [1]
> [2]

More information about the discuss mailing list