From e7d625e288d155191014857591469efd8bb96b6b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20K=C4=99pie=C5=84?= Date: Tue, 7 Sep 2021 09:28:48 +0200 Subject: [PATCH] Update release checklist Add an item to the release checklist to make sure regression tests reproducing publicly disclosed security issues are eventually merged into each maintained branch. --- .gitlab/issue_templates/CVE.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.gitlab/issue_templates/CVE.md b/.gitlab/issue_templates/CVE.md index bff1818526..fc95d55ca0 100644 --- a/.gitlab/issue_templates/CVE.md +++ b/.gitlab/issue_templates/CVE.md @@ -31,3 +31,7 @@ email to [security-officer@isc.org](security-officer@isc.org). - [ ] Create/update the private issue containing links to fixes & reproducers for all CVEs fixed in a given release cycle - [ ] Reserve a block of `CHANGES` placeholders once the complete set of vulnerabilities fixed in a given release cycle is determined - [ ] Ensure the merge requests containing CVE fixes are merged into `security-*` branches in CVE identifier order + +### Post-disclosure actions + + - [ ] Merge a regression test reproducing the bug into all affected (and still maintained) BIND branches