mirror of
https://github.com/kovidgoyal/kitty
synced 2026-06-08 14:18:26 +02:00
Add a note on typical timelines for security incident responses
This commit is contained in:
@@ -9,3 +9,10 @@ and released just like all other bugs.
|
|||||||
|
|
||||||
Preferably send an email to kovid at kovidgoyal.net or open a private security
|
Preferably send an email to kovid at kovidgoyal.net or open a private security
|
||||||
advisory using the GitHub security advisory facility.
|
advisory using the GitHub security advisory facility.
|
||||||
|
|
||||||
|
Note that I will respond to security communication within 72 hours. Once
|
||||||
|
the bug is confirmed, it will be fixed or at least mitigated within another 72
|
||||||
|
hours, at which time the fix will typically be committed to master and hence be
|
||||||
|
public. That timeline might be extended based on the severity of the issue and the
|
||||||
|
current state of master in terms of making a new release, if so, it will be
|
||||||
|
done in consultation with the issue reporter.
|
||||||
|
|||||||
Reference in New Issue
Block a user