There is such an organization, the Linux Foundation is the CNA being the hindrance to these efforts. And yes, they won't perform the role, someone else will and they will be paid for it.
For some that's fine, I find it a significant amount of wasted effort, confusion and potential issues.
Comments
I think you got a bit confused.
There is such an organization, the Linux Foundation is the CNA being the hindrance to these efforts. And yes, they won't perform the role, someone else will and they will be paid for it.
For some that's fine, I find it a significant amount of wasted effort, confusion and potential issues.
You were implying the Linux Foundation is attempting to get paid for providing said "clean feed".
Anyway, this has devolved far enough.
[Ed.: the Linux Foundation isn't even the CNA, shame on me for accepting that without verifying. The actual CNA is kernel.org. https://www.cve.org/Media/News/item/news/2024/02/13/kernel-o... ]