projects / cascardo / ovs.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 811c911) | patch
SECURITY.md: Increase embargo period from 3-5 to 10-15 business days.
authorBen Pfaff <blp@ovn.org>
Fri, 1 Apr 2016 04:54:03 +0000 (21:54 -0700)
committerBen Pfaff <blp@ovn.org>
Sun, 10 Apr 2016 20:38:57 +0000 (13:38 -0700)
commit24de3634f9dc2e1ca07ce65fcf619a197a5cb61e
tree3ebf00d87700cb1988f11c7912368571c2dcf1f0tree | snapshot
parent811c911ff523b0cbba4fbf1b4523a63690d522f1commit | diff
SECURITY.md: Increase embargo period from 3-5 to 10-15 business days.

When we recently ran a genuine vulnerability through this process, we
discovered that 3-5 days was far too short.  The business processes behind
releasing fixed versions of software at companies that use Open vSwitch
cannot cope with such rapid turnaround, due e.g. to QA and other processes.

Signed-off-by: Ben Pfaff <blp@ovn.org>
Acked-by: Ryan Moats <rmoats@us.ibm.com>
Acked-by: Flavio Leitner <fbl@redhat.com>
SECURITY.md diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.