From 509d6b684a8d2b06a5199f267fee9a37fca273f8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Erkin=20Alp=20G=C3=BCney?= Date: Mon, 29 Nov 2021 21:22:16 +0300 Subject: [PATCH 1/5] Initial draft of the security policy --- SECURITY.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..d206d5b --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,16 @@ +# Security Policy + +## Supported Versions + +The latest release and the release on Samuel's instance are supported. + +## Reporting a Vulnerability + +Report them to Samuel, in the Fosscord Discord guild, or the server +announcements guild at dev.fosscord.com. However, if you can fix it +yourself, fix it yourself first and then propose a PR at this repository. + +Samuel "Flam3rboy", Founder +"XNaCly" Matteo, Maintainer +Conner "Intevel", Maintainer +Erkin Alp, security policy author From f531ec223912cf9678e058e9733a2b82356f7b81 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Erkin=20Alp=20G=C3=BCney?= Date: Mon, 29 Nov 2021 21:22:59 +0300 Subject: [PATCH 2/5] Forgot that this repository has almost no code --- SECURITY.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/SECURITY.md b/SECURITY.md index d206d5b..ec37e01 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -8,7 +8,8 @@ The latest release and the release on Samuel's instance are supported. Report them to Samuel, in the Fosscord Discord guild, or the server announcements guild at dev.fosscord.com. However, if you can fix it -yourself, fix it yourself first and then propose a PR at this repository. +yourself, fix it yourself first and then propose a PR at the relevant +repository. Samuel "Flam3rboy", Founder "XNaCly" Matteo, Maintainer From 34000375a7274da3de2f1e298a4c27525b45fbee Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Erkin=20Alp=20G=C3=BCney?= Date: Mon, 29 Nov 2021 21:51:18 +0300 Subject: [PATCH 3/5] Apply Samuel's suggestions --- SECURITY.md | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index ec37e01..463c881 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -2,14 +2,13 @@ ## Supported Versions -The latest release and the release on Samuel's instance are supported. +Only the latest release is supported. ## Reporting a Vulnerability -Report them to Samuel, in the Fosscord Discord guild, or the server -announcements guild at dev.fosscord.com. However, if you can fix it -yourself, fix it yourself first and then propose a PR at the relevant -repository. +Report them to Fosscord team, in the [Fosscord Discord guild](https://discord.gg/ZrnGQP6p3d). +However, if you can fix it yourself, fix it yourself first and then propose +a PR at the relevant repository. Samuel "Flam3rboy", Founder "XNaCly" Matteo, Maintainer From 4a8dcd1ee9f44bf450c778bbfae5e7f94c0ad7c9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Erkin=20Alp=20G=C3=BCney?= Date: Thu, 23 Dec 2021 23:27:09 +0300 Subject: [PATCH 4/5] No-emergency-exits security policy --- SECURITY.md | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index 463c881..0d666a0 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -8,9 +8,7 @@ Only the latest release is supported. Report them to Fosscord team, in the [Fosscord Discord guild](https://discord.gg/ZrnGQP6p3d). However, if you can fix it yourself, fix it yourself first and then propose -a PR at the relevant repository. +a PR at the relevant repository. There is **no** fast track for getting security bugs fixed +urgently. They are still prioritised like other bugs. -Samuel "Flam3rboy", Founder -"XNaCly" Matteo, Maintainer -Conner "Intevel", Maintainer -Erkin Alp, security policy author +Fosscord team From ce12a6e1510c6b3fdc9e53132d3ffc291e9c6996 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Erkin=20Alp=20G=C3=BCney?= Date: Sun, 26 Dec 2021 22:01:00 +0300 Subject: [PATCH 5/5] Pre-releases are not supported --- SECURITY.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SECURITY.md b/SECURITY.md index 0d666a0..535c146 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -2,7 +2,7 @@ ## Supported Versions -Only the latest release is supported. +Only the latest release is supported. Pre-releases are explicitly **not** supported. ## Reporting a Vulnerability