On Sat, Apr 02, 2016 at 04:07:50PM -0600, Ryan Moats wrote: > "dev" <dev-boun...@openvswitch.org> wrote on 03/31/2016 11:54:03 PM: > > > From: Ben Pfaff <b...@ovn.org> > > To: dev@openvswitch.org > > Cc: Ben Pfaff <b...@ovn.org> > > Date: 03/31/2016 11:54 PM > > Subject: [ovs-dev] [PATCH] SECURITY.md: Increase embargo period from > > 3-5 to 10-15 business days. > > Sent by: "dev" <dev-boun...@openvswitch.org> > > > > When we recently ran a genuine vulnerability through this process, we > > discovered that 3-5 days was far too short. The business processes > behind > > releasing fixed versions of software at companies that use Open vSwitch > > cannot cope with such rapid turnaround, due e.g. to QA and other > processes. > > > > Signed-off-by: Ben Pfaff <b...@ovn.org> > > --- > > After some thought ... > > Acked-by: Ryan Moats <rmo...@us.ibm.com>
Thanks. Applied to master. _______________________________________________ dev mailing list dev@openvswitch.org http://openvswitch.org/mailman/listinfo/dev
