Re: [qemu-web PATCH] contribute: define clear limits on bug report volume

[Thomas Huth <thuth@redhat.com>]

On 25/09/2026 18.08, Richard Henderson wrote:
> Good idea, Daniel. While you're fixing typos, Thomas:
> 
> On 9/25/26 00:51, Thomas Huth wrote:
>> On 24/09/2026 15.56, Daniel P. Berrangé wrote:
>>> Recently QEMU has received a denial of service attack on
>>> its bug tracker in the form of 120 reports in 10 minutes,
>>> and now repeated by another reporter in the form of 50
>>> reports in the same day.
>>>
>>> Prior to switching security disclosures to the bug tracker,
>>> single reporters have submited 18, 22, and 114 bug reports.
> 
> submitted.
> 
>>>
>>> None of this is sustainable. It is an effective denial of
>>> service attack on the project maintainers' time. Every bug
>>> report is a TODO item added to someone's workload.
>>>
>>> It is time to put hard limits on how many bugs, discovered
>>> with assitance of automated tools, we are willing to accept
> 
> assistance
> 
>>> in a givenm time frame.
> 
> given
Thanks, I've fixed the typos and pushed it to the repo now.

  Thomas