romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-04-15 00:41:41 +03:00
Code Issues Projects Releases Packages Wiki Activity

VULN-DISCLOSURE-POLICY.md: 7 days embargo is max

Browse source 
It was recently updated in this doc to seven, but there were *two*
numbers mentioned and only one of them was updated leaving the paragraph
quite confusing.

Follow-up to 83c90e5047

Closes #17921
This commit is contained in:
Daniel Stenberg 2025-07-14 08:59:04 +02:00
parent f5a44e1549
commit af81e8fe5f
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
docs/VULN-DISCLOSURE-POLICY.md
View file

@ -84,7 +84,7 @@ announcement.
[distros@openwall](https://oss-security.openwall.org/wiki/mailing-lists/distros)
to prepare them about the upcoming public security vulnerability
announcement - attach the advisory draft for information with CVE and
current patch. 'distros' does not accept an embargo longer than 14 days and
current patch. 'distros' does not accept an embargo longer than 7 days and
they do not care for Windows-specific flaws.
- No more than 48 hours before the release, the private branch is merged into