Michael Catanzaro plans to end his role managing GNOME security issue tracking by December 2026. He has handled the work largely alone since 2020 with support from Red Hat. The transition includes changes to disclosure deadlines starting in August.
Michael Catanzaro will stop tracking new security issues for GNOME on November 1, 2026. He will continue handling only those already in the pipeline until December 1, when all related disclosure deadlines are expected to pass.
Starting August 1, 2026, GNOME will shorten its vulnerability disclosure deadline to 30 days from the previous 90 days. This adjustment responds to the increase in AI-generated security submissions.
Catanzaro is seeking an experienced GNOME community member to assume the role. The successor would manage reports through a form on security.gnome.org, which leads to confidential GitLab issues and a manually updated wiki page.
Other Linux distributions such as Ubuntu and Fedora use searchable notices or Bugzilla for similar tracking.
