Differences

This shows you the differences between two versions of the page.

--- dev:security [2015/07/21 16:02] – [Current security team members] add Rogan Hamby to security team per vote gmcharlton
+++ dev:security [2023/06/01 13:22] (current) – [How are security fixes released?] master to main dyrcona
@@ Line 4: / Line 4: @@
 You can report a security-related issue in Evergreen via the bug tracking system at https://bugs.launchpad.net/evergreen -- be sure to check the box labeled "This bug is a security vulnerability".
+While we prefer that security bugs be reported via Launchpad, they can also be reported to [[mailto:security@evergreen-ils.org|security@evergreen-ils.org]].
 NOTE: If you are an active Evergreen "bug wrangler" or similar, you may instead have an option to change "This bug contains information that is:" from "Public" to "Private Security".
@@ Line 28: / Line 30: @@
 ====How are security fixes released?====
-After testing, the code will be merged to the relevant public Evergreen branches (origin/master, origin/rel_2_3, …) and the Launchpad entries will be marked as Fix Committed.  From here, the process proceeds the same as a regular non-security release, though every effort will be made to cut the releases in a timely fashion.
+After testing, the code will be merged to the relevant public Evergreen branches (origin/main, origin/rel_2_3, …) and the Launchpad entries will be marked as Fix Committed.  From here, the process proceeds the same as a regular non-security release, though every effort will be made to cut the releases in a timely fashion.
 ====How are security releases announced?====
@@ Line 92: / Line 94: @@
   * Yamil Suarez
   * Dan Wells
+  * Liam Whalen