Skip to content

Update SECURITY.md - Bring it up to par with the one in server #241

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
nickvergessen merged 3 commits into from
Oct 26, 2023
Merged

Update SECURITY.md - Bring it up to par with the one in server #241

Changes from 1 commit
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
b11f39c
Update SECURITY.md - Bring it up to par with the one in `server`
joshtrichards Oct 23, 2023
45bcaef
Sec Policy: Add community maintained language
joshtrichards Oct 24, 2023
4dc7d45
Reformulate community section
nickvergessen Oct 26, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Sec Policy: Add community maintained language 
Signed-off-by: Josh Richards <[email protected]>
  • Loading branch information
@joshtrichards
joshtrichards authored Oct 24, 2023
commit 45bcaef051b6de7d6957d25a2308971f6a1604d3
6 changes: 5 additions & 1 deletion SECURITY.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,11 @@ Your report should include:
You should receive an initial acknowledgement within 24 hours in most cases.

A member of the security team will confirm the vulnerability, determine its impact, follow-up with any questions,
and coordinate the fix and publication.
and coordinate the fix and publication.

If the vulnerability involves an app that is not formally maintained by Nextcloud (i.e. hosted by the
Nextcloud project but community maintained), the security team will contact the current maintainer
and help make sure the issue gets fixed.

The fix will be applied to all applicable and still supported stable branches, tested, and packaged in the next security release.
The vulnerability will be publicly announced after the release. Finally, your name will be added
Expand Down