VULN-DISCLOSURE-POLICY.md: the distros list wants <= 7 days embargo

Closes #17497
This commit is contained in:
Daniel Stenberg 2025-05-31 17:46:19 +02:00
parent d1145df24d
commit 83c90e5047
No known key found for this signature in database
GPG Key ID: 5CC908FDB71E12C2

View File

@ -80,7 +80,7 @@ announcement.
Bounty team and the reporter is asked to request the reward from them after
the issue has been completely handled and published by curl.
- No more than 10 days before release, inform
- No more than seven days before release, inform
[distros@openwall](https://oss-security.openwall.org/wiki/mailing-lists/distros)
to prepare them about the upcoming public security vulnerability
announcement - attach the advisory draft for information with CVE and