diff options
| author | Dmitry Eremin-Solenikov <dbaryshkov@gmail.com> | 2019-03-26 08:55:12 +0000 |
|---|---|---|
| committer | Dmitry Eremin-Solenikov <dbaryshkov@gmail.com> | 2019-03-26 08:55:12 +0000 |
| commit | f87e0b3f1164cb582b99b1d7ed646f5b45591e2e (patch) | |
| tree | 5d21c4931a2f4431075cf78bda32afe0d4b03abf | |
| parent | 640a330749c3a4531b511964a045468d76fffd25 (diff) | |
| parent | 63fcec30fbcffcad9a7ab860bf699636ec938e5a (diff) | |
| download | gnutls-f87e0b3f1164cb582b99b1d7ed646f5b45591e2e.tar.gz | |
Merge branch 'tmp-security-update' into 'master'
SECURITY.md: updated to reflect the current practice
See merge request gnutls/gnutls!951
| -rw-r--r-- | SECURITY.md | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/SECURITY.md b/SECURITY.md index 372fcacc4e..b8d055c282 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -21,11 +21,11 @@ branches which are affected. The commit message must refer to the bug report addressed (e.g., our issue tracker or some external issue tracker). For issues reported by third parties which request an embargo time, the -general aim to have embargo dates which are two weeks or less in duration. -In exceptional circumstances longer initial embargoes may be negotiated by -mutual agreement between members of the security team and other relevant -parties to the problem. Any such extended embargoes will aim to be at most -one month in duration. +general aim to have embargo dates which do not exceed the upcoming stable +release date, or the following one, if the report was received late for +a fix to be included. In exceptional circumstances longer initial embargoes +may be negotiated by mutual agreement between members of the security team +and other relevant parties to the problem. # Releasing |