Commitcfa7e4c

committed

Merge pull requestsymfony#2696 from fabpot/security-tweaks

added some more information about the security process

2 parents7ae32e2 +4e7472c commitcfa7e4cCopy full SHA for cfa7e4c

File tree

-2

lines changed

-2

lines changed

Lines changed: 4 additions & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -75,7 +75,9 @@ solve the issue via pull requests, code reviews, and comments;`
`75`	`75`
`76`	`76`	`4. Once the fix is found, all involved projects collaborate to find the best`
`77`	`77`	`date for a joint release (there is no guarantee that all releases will be at`
`78`		`-the same time but we will try hard to make them at about the same time).`
	`78`	`+the same time but we will try hard to make them at about the same time). When`
	`79`	`+the issue is not known to be exploited in the wild, a period of two weeks`
	`80`	`+seems like a reasonable amount of time.`
`79`	`81`
`80`	`82`	`The list of downstream projects participating in this process is kept as small`
`81`	`83`	`as possible in order to better manage the flow of confidential information`
`@@ -85,7 +87,7 @@ the Symfony security team.`
`85`	`87`	`As of today, the following projects have validated this process and are part`
`86`	`88`	`of the downstream projects included in this process:`
`87`	`89`
`88`		`-* Drupal`
	`90`	`+* Drupal (releases typically happen on Wednesdays)`
`89`	`91`	`* eZPublish`
`90`	`92`
`91`	`93`	`Security Advisories`

Comments

(0)