Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Create Security Police #8360

Merged
merged 4 commits into from
Oct 19, 2022
Merged

Create Security Police #8360

merged 4 commits into from
Oct 19, 2022

Conversation

joycebrum
Copy link
Contributor

Regarding the issue #8349, I've created the document but It still needs the reliability version specification and an email to report security issues.

Any other changes just let me know.

Closes #8349

@hcho3
Copy link
Collaborator

hcho3 commented Oct 18, 2022

We don't currently support past releases; that is, we do not backport any patches to past releases. We lack resources to support past releases. Users who want to get the latest bug fixes will need to use the latest stable release. How should we indicate this fact in SECURITY.md?

hcho3
hcho3 requested changes Oct 18, 2022
View reviewed changes
SECURITY.md Outdated Show resolved Hide resolved
@joycebrum
Copy link
Contributor Author

We don't currently support past releases; that is, we do not backport any patches to past releases. We lack resources to support past releases. Users who want to get the latest bug fixes will need to use the latest stable release. How should we indicate this fact in SECURITY.md?

I saw some examples with the text explicitly saying this, take a look how it is now

@joycebrum
Copy link
Contributor Author

What email should I use for security reports?

@hcho3 hcho3 merged commit 52977f0 into dmlc:master Oct 19, 2022
@hcho3
Copy link
Collaborator

hcho3 commented Oct 19, 2022

@joycebrum I went ahead and merged your pull request. Thank you for your contribution!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@hcho3 hcho3 hcho3 requested changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Create Security Police
2 participants
@joycebrum @hcho3