[ovs-dev] [PATCH] SECURITY.md: Increase embargo period from 3-5 to 10-15 business days.

Ben Pfaff blp at ovn.org
Sun Apr 10 20:41:16 UTC 2016


On Wed, Apr 06, 2016 at 12:44:02AM -0300, Flavio Leitner wrote:
> On Thu, Mar 31, 2016 at 09:54:03PM -0700, Ben Pfaff wrote:
> > When we recently ran a genuine vulnerability through this process, we
> > discovered that 3-5 days was far too short.  The business processes behind
> > releasing fixed versions of software at companies that use Open vSwitch
> > cannot cope with such rapid turnaround, due e.g. to QA and other processes.
> > 
> > Signed-off-by: Ben Pfaff <blp at ovn.org>
> > ---
> 
> Acked-by: Flavio Leitner <fbl at redhat.com>
> 
> Thanks Ben!

Thanks Flavio, applied to master.



More information about the dev mailing list