git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: [PATCH v3] embargoed releases: also describe the git-security list and the process

From
Junio C Hamano <gitster@pobox.com>
Date
Oct 24, 2022, 22:56 UTC
Message-ID
<xmqqeduwrfuc.fsf@gitster.g>
In-Reply-To
<CADq8SzV06zTHmG+uSW==R5sL=MveuA9VSMhpV8hck+rzvVSp4Q@mail.gmail.com>
Julia Ramer <prplr@github.com> writes:
Show 10 quoted lines
>> > +- Once the review has settled and everyone involved in the review agrees that
>> > +  the patches are ready, the Git maintainer, and others determine a release date
>> > +  as well as the release trains that are serviced. The decision regarding which
>>
>> We typically know how involved the final changes would be (i.e. the
>> minimum time it would take for us and involved others to prepare the
>> release) way before all the t's are crossed and i's are dotted in
>> the patches, so setting the release date may be done much earlier.
>
> Distilled into s/ready/nearing the finish line/
Excellent.
Show 8 quoted lines
>> > +- Less than a week before the release, a mail with the relevant information is
>> > +  sent to <distros@vs.openwall.org> (see below), a list used to pre-announce
>> > +  embargoed releases of open source projects to the stakeholders of all major
>> > +  distributions of Linux as well as other OSes. This includes a Git bundle
>> > +  of the tagged version(s), but no further specifics of the vulnerability.
> ...
> I think it makes sense to just remove the entire last sentence, as the
> relevant information is referenced in the parenthetical "(see below)".
Very sensible.
Thanks.
Previous: Julia RamerNext: Taylor Blau
Message 20 of 24 in “embargoed releases: also describe the git-security list and the process”
  1. embargoed releases: also describe the git-security list and the processJulia Ramer via GitGitGadget, Sep 1, 2022
  2. Junio C HamanoSep 2, 2022
  3. Julia RamerSep 27, 2022
  4. Junio C HamanoSep 28, 2022
  5. Julia RamerOct 18, 2022
  6. Junio C HamanoOct 19, 2022
  7. Junio C HamanoSep 2, 2022
  8. Johannes SchindelinSep 3, 2022
  9. Junio C HamanoSep 5, 2022
  10. embargoed releases: also describe the git-security list and the processJulia Ramer via GitGitGadget, Oct 19, 2022
  11. Junio C HamanoOct 19, 2022
  12. Taylor BlauOct 19, 2022
  13. Junio C HamanoOct 19, 2022
  14. Taylor BlauOct 19, 2022
  15. Junio C HamanoOct 19, 2022
  16. Taylor BlauOct 20, 2022
  17. embargoed releases: also describe the git-security list and the processJulia Ramer via GitGitGadget, Oct 21, 2022
  18. Junio C HamanoOct 21, 2022
  19. Julia RamerOct 24, 2022
  20. Junio C HamanoOct 24, 2022
  21. Taylor BlauOct 22, 2022
  22. Julia RamerOct 24, 2022
  23. embargoed releases: also describe the git-security list and the processJulia Ramer via GitGitGadget, Oct 24, 2022
  24. Junio C HamanoOct 24, 2022

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.