[dpdk-dev] [PATCH] doc: clarify disclosure time slot when no response

Stephen Hemminger stephen at networkplumber.org
Fri Mar 31 17:31:01 CEST 2023


On Fri, 31 Mar 2023 12:38:23 +0200
Thomas Monjalon <thomas at monjalon.net> wrote:

> >  
> > +If no confirmation mail send back to reporter in this period, thus mean security
> > +team take this vulnerability as low severity. Furthermore shortest embargo **two weeks**
> > +is required for it. Reporter can sumbit the bug through normal process or send  
> 
> sumbit -> submit
> 
> > +out patch to public.  
> 
> Do we agree on the principle?
> Does it require a bit of rewriting?

LGTM


More information about the dev mailing list