ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

Update release checklist

Browse Source 
Add an item to the release checklist to make sure regression tests
reproducing publicly disclosed security issues are eventually merged
into each maintained branch.
This commit is contained in:
Michał Kępień
2021-09-15 22:49:20 +02:00
parent 097f589e40
commit e7d625e288
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitlab/issue_templates/CVE.md
+4
View File
@@ -31,3 +31,7 @@ email to [security-officer@isc.org](security-officer@isc.org).
- [ ] Create/update the private issue containing links to fixes & reproducers for all CVEs fixed in a given release cycle
- [ ] Reserve a block of `CHANGES` placeholders once the complete set of vulnerabilities fixed in a given release cycle is determined
- [ ] Ensure the merge requests containing CVE fixes are merged into `security-*` branches in CVE identifier order
### Post-disclosure actions
- [ ] Merge a regression test reproducing the bug into all affected (and still maintained) BIND branches