alt Hacker NewsIt is absolutely Google's security issue if they use an open source project with that license:
https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/HEAD:/COPYING....
and then expect volunteers to provide them fixes.
Replies
GaryBluto • last Saturday at 10:09 PM
It's not just Google who could be affected by this.
> and then expect volunteers to provide them fixes.
Expect volunteers to provide everyone using the software with fixes.
➕ show 1 reply
Google never asked a volunteer for a fix.
This is part of Google’s standard disclosure policy: it gets disclosed within 90 days starting from confirmation+contact.
If ffmpeg didn’t want to fix it, they could’ve just let the CVE get opened.