From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <web-bounces@dpdk.org>
Received: from dpdk.org (dpdk.org [92.243.14.124])
	by dpdk.space (Postfix) with ESMTP id A8489A046B
	for <public@inbox.dpdk.org>; Tue, 25 Jun 2019 15:36:44 +0200 (CEST)
Received: from [92.243.14.124] (localhost [127.0.0.1])
	by dpdk.org (Postfix) with ESMTP id 9F2341B9FD;
	Tue, 25 Jun 2019 15:36:44 +0200 (CEST)
Received: from mx1.redhat.com (mx1.redhat.com [209.132.183.28])
 by dpdk.org (Postfix) with ESMTP id EC9A61B9FD
 for <web@dpdk.org>; Tue, 25 Jun 2019 15:36:42 +0200 (CEST)
Received: from smtp.corp.redhat.com (int-mx01.intmail.prod.int.phx2.redhat.com
 [10.5.11.11])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by mx1.redhat.com (Postfix) with ESMTPS id 1A9C1309265C;
 Tue, 25 Jun 2019 13:36:42 +0000 (UTC)
Received: from [10.36.112.46] (ovpn-112-46.ams2.redhat.com [10.36.112.46])
 by smtp.corp.redhat.com (Postfix) with ESMTPS id D6559600C7;
 Tue, 25 Jun 2019 13:36:39 +0000 (UTC)
To: Ferruh Yigit <ferruh.yigit@intel.com>,
 Thomas Monjalon <thomas@monjalon.net>
Cc: web@dpdk.org, John McNamara <john.mcnamara@intel.com>
References: <20190617160402.6770-1-ferruh.yigit@intel.com>
From: Maxime Coquelin <maxime.coquelin@redhat.com>
Message-ID: <0aea9cbf-4d7f-517f-3014-9da8824176d3@redhat.com>
Date: Tue, 25 Jun 2019 15:36:38 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101
 Thunderbird/60.6.1
MIME-Version: 1.0
In-Reply-To: <20190617160402.6770-1-ferruh.yigit@intel.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: en-US
Content-Transfer-Encoding: 7bit
X-Scanned-By: MIMEDefang 2.79 on 10.5.11.11
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16
 (mx1.redhat.com [10.5.110.43]); Tue, 25 Jun 2019 13:36:42 +0000 (UTC)
Subject: Re: [dpdk-web] [PATCH] clarify security action
X-BeenThere: web@dpdk.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: DPDK website maintenance <web.dpdk.org>
List-Unsubscribe: <https://mails.dpdk.org/options/web>,
 <mailto:web-request@dpdk.org?subject=unsubscribe>
List-Archive: <http://mails.dpdk.org/archives/web/>
List-Post: <mailto:web@dpdk.org>
List-Help: <mailto:web-request@dpdk.org?subject=help>
List-Subscribe: <https://mails.dpdk.org/listinfo/web>,
 <mailto:web-request@dpdk.org?subject=subscribe>
Errors-To: web-bounces@dpdk.org
Sender: "web" <web-bounces@dpdk.org>



On 6/17/19 6:04 PM, Ferruh Yigit wrote:
> Add a note to not use Bugzilla but report via email to security@dpdk.org
> 
> Signed-off-by: Ferruh Yigit <ferruh.yigit@intel.com>
> ---
>   content/security/_index.md | 6 ++++--
>   1 file changed, 4 insertions(+), 2 deletions(-)
> 
> diff --git a/content/security/_index.md b/content/security/_index.md
> index a6927fc..3c1ad82 100644
> --- a/content/security/_index.md
> +++ b/content/security/_index.md
> @@ -5,8 +5,10 @@ weight = "9"
>   
>   ## Vulnerability Management
>   ---
> -If a vulnerability is found in DPDK,
> -it must be reported, analyzed, fixed and disclosed according to the
> +If a vulnerability is found in DPDK, please do not use Bugzilla for reporting security issues.
> +Instead, send GPG-encrypted emails to [security@dpdk.org](mailto:security@dpdk.org). We will respond promptly to begin coordinating a fix and disclosure.
> +
> +Security issues must be reported, analyzed, fixed and disclosed according to the
>   [vulnerability management process](//doc.dpdk.org/guides/contributing/vulnerability.html).
>   
>   ## Contact
> 

Acked-by: Maxime Coquelin <maxime.coquelin@redhat.com>