From 0f6eca332994c44c06b374d19cc21af9440adc83 Mon Sep 17 00:00:00 2001 From: tison Date: Sat, 6 Aug 2022 07:27:22 +0800 Subject: [PATCH 1/2] Add Reporting Vulnerabilities section to Security Policy Signed-off-by: tison --- SECURITY.md | 2 +- site2/docs/security-policy-and-supported-versions.md | 6 ++++++ 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/SECURITY.md b/SECURITY.md index c474eb7f4bde8..7bd3ead079fbd 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -1,3 +1,3 @@ # Security Policy -The security policy and supported versions are outlined on the Pulsar website here: https://pulsar.apache.org/docs/security-policy-and-supported-versions/. \ No newline at end of file +The security policy and supported versions are outlined on the Pulsar website here: https://pulsar.apache.org/docs/security-policy-and-supported-versions/. diff --git a/site2/docs/security-policy-and-supported-versions.md b/site2/docs/security-policy-and-supported-versions.md index 233686507770e..276fece66f45f 100644 --- a/site2/docs/security-policy-and-supported-versions.md +++ b/site2/docs/security-policy-and-supported-versions.md @@ -14,6 +14,12 @@ https://pulsar.apache.org/docs/en/security-overview/. The Pulsar community will announce security vulnerabilities and how to mitigate them on the [users@pulsar.apache.org](mailto:users@pulsar.apache.org). For instructions on how to subscribe, please see https://pulsar.apache.org/contact/. +## Reporting Vulnerabilities + +The Pulsar community follows the ASF [vulnerability handling process](https://apache.org/security/#vulnerability-handling). + +To report a new vulnerability you have discovered please follow the [ASF vulnerability reporting process](https://apache.org/security/#reporting-a-vulnerability). Besides, you can send one plain-text email for each vulnerability to [private@pulsar.apache.org](mailto:private@pulsar.apache.org). + ## Versioning Policy The Pulsar project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html). Existing releases can expect From 1cb2ebcd45e007939c3026883ebf5d9df15cf216 Mon Sep 17 00:00:00 2001 From: tison Date: Mon, 8 Aug 2022 18:43:38 +0800 Subject: [PATCH 2/2] Update site2/docs/security-policy-and-supported-versions.md --- site2/docs/security-policy-and-supported-versions.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/site2/docs/security-policy-and-supported-versions.md b/site2/docs/security-policy-and-supported-versions.md index 276fece66f45f..ac907e12c7006 100644 --- a/site2/docs/security-policy-and-supported-versions.md +++ b/site2/docs/security-policy-and-supported-versions.md @@ -18,7 +18,7 @@ For instructions on how to subscribe, please see https://pulsar.apache.org/conta The Pulsar community follows the ASF [vulnerability handling process](https://apache.org/security/#vulnerability-handling). -To report a new vulnerability you have discovered please follow the [ASF vulnerability reporting process](https://apache.org/security/#reporting-a-vulnerability). Besides, you can send one plain-text email for each vulnerability to [private@pulsar.apache.org](mailto:private@pulsar.apache.org). +To report a new vulnerability you have discovered please follow the [ASF vulnerability reporting process](https://apache.org/security/#reporting-a-vulnerability). ## Versioning Policy