Skip to content

updated expectation management on sec issues#437

Merged
DaanHoogland merged 1 commit into
staging-sitefrom
sec-update
Jun 10, 2026
Merged

updated expectation management on sec issues#437
DaanHoogland merged 1 commit into
staging-sitefrom
sec-update

Conversation

@DaanHoogland

Copy link
Copy Markdown
Contributor

No description provided.

Comment thread src/pages/security.md
Comment thread src/pages/security.md
Comment on lines +44 to +46
validated, it will still take time to fix the issue. The amount of
time depends on the availability of volunteers and number people
involved that have a stake in the issue. In later years it has turned

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It might make sense to mention that the round-trip time also depends on the severity of the issue? Hopefully severe issues won't be open for six months ;)

Comment thread src/pages/security.md
Comment on lines +47 to +48
out to take up to six months, from notification to public announcement
of the vulnerability, due to parallel work on multiple issues. During

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
out to take up to six months, from notification to public announcement
of the vulnerability, due to parallel work on multiple issues. During
out to take up more and more time from notification to public announcement
of the vulnerability, due to parallel work on multiple issues. During

@borisstoyanov @raboof ?

@DaanHoogland

Copy link
Copy Markdown
Contributor Author

not much +1 reactions but I’ll merge anyway. We can revert at will...

@DaanHoogland DaanHoogland merged commit aa2260c into staging-site Jun 10, 2026
3 checks passed
@DaanHoogland DaanHoogland deleted the sec-update branch June 10, 2026 14:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants