From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from dpdk.org (dpdk.org [92.243.14.124]) by inbox.dpdk.org (Postfix) with ESMTP id BABD9A04C3 for ; Wed, 13 Nov 2019 17:52:06 +0100 (CET) Received: from [92.243.14.124] (localhost [127.0.0.1]) by dpdk.org (Postfix) with ESMTP id 9ECB81F5; Wed, 13 Nov 2019 17:52:06 +0100 (CET) Received: from us-smtp-delivery-1.mimecast.com (us-smtp-2.mimecast.com [207.211.31.81]) by dpdk.org (Postfix) with ESMTP id E37F51F5 for ; Wed, 13 Nov 2019 17:52:04 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1573663924; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=cG35lX9bowI9JuHBvAIUs7h9nueXfnqMyN/TpUmfomo=; b=A0lDeCHMrBSaO/cKmxsMxrqTYvQBnqE5ayLvR/OcA5KaialvfpvcuRw/VwEhuI1nIX6bJc eEFANgF9paMifsenLgV52B/RwTmcsdR1+5l18/sADRswZMRVSdDvBBC3bywJthXZItJQbP XnLCaGb2nonm9Uc+gL6qIITJ7O3YU7c= Received: from mimecast-mx01.redhat.com (mimecast-mx01.redhat.com [209.132.183.4]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-163-qHxzw-CxPYaj5PSuLBy9NQ-1; Wed, 13 Nov 2019 11:52:01 -0500 Received: from smtp.corp.redhat.com (int-mx05.intmail.prod.int.phx2.redhat.com [10.5.11.15]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx01.redhat.com (Postfix) with ESMTPS id D45E01250031; Wed, 13 Nov 2019 16:51:59 +0000 (UTC) Received: from rh.redhat.com (ovpn-117-246.ams2.redhat.com [10.36.117.246]) by smtp.corp.redhat.com (Postfix) with ESMTP id 16256842A4; Wed, 13 Nov 2019 16:51:52 +0000 (UTC) From: Kevin Traynor To: stable@dpdk.org, bluca@debian.org Cc: thomas@monjalon.net, ferruh.yigit@intel.com, david.marchand@redhat.com, Kevin Traynor Date: Wed, 13 Nov 2019 16:51:19 +0000 Message-Id: <20191113165119.10807-2-ktraynor@redhat.com> In-Reply-To: <20191113165119.10807-1-ktraynor@redhat.com> References: <20191113165119.10807-1-ktraynor@redhat.com> MIME-Version: 1.0 X-Scanned-By: MIMEDefang 2.79 on 10.5.11.15 X-MC-Unique: qHxzw-CxPYaj5PSuLBy9NQ-1 X-Mimecast-Spam-Score: 0 Content-Type: text/plain; charset=WINDOWS-1252 Content-Transfer-Encoding: quoted-printable Subject: [dpdk-stable] [PATCH 2/2] README: add a few notes about a security release X-BeenThere: stable@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: patches for DPDK stable branches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: stable-bounces@dpdk.org Sender: "stable" Signed-off-by: Kevin Traynor --- README | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/README b/README index a4d7a75..fdf61ab 100644 --- a/README +++ b/README @@ -187,4 +187,5 @@ and finally send a patch for the dpdk-web changes to th= e web team at web@dpdk.or =20 6-announce-release +=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 The last step is to announce it. The usage is also simpler: just type the @@ -194,3 +195,23 @@ too short and simple so far :). =20 =20 + +Security Releases +=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D + +Just a reminder any comms to DPDK security team should be over encrypted e= mail. + +For releases with embargoed CVEs steps 1/2/3/4 above will be skipped. + +Patches will be provided by the DPDK security team. They should be applied +locally and compile tested locally without using external tools like travi= s +that will make the patches public. + +For validation notes in step 5, they should be obtained from the author or +DPDK security team. + +In terms of sequence, the main thing is that everyone is ready and availab= le. +Pushing different tags to the server can be done in series with other stab= le +maintainers to avoid any issues with tarball/docs generation. A single web= site +update can then be made. + That's all. --=20 2.21.0