Re: [PATCH v1 1/1] security-process: update process information

[P J P]

+-- On Wed, 2 Dec 2020, Philippe Mathieu-Daudé wrote --+
| Maybe:
| 
|      0) **Acknowledge reception**
|        - A non-automated response email is sent to acknowledge the
|          reception of the request.
|          This is the starting date for the maximum **60 days** required
|          to process the issue, including bullets 1) and 2).
| 
| > +    - Create an upstream fix patch
| 
|          with the proper Buglink/CVE/Reported-by tags.
| 
|        - Participate in the review process until the patch is merged.
|          Test the fix updates with the private reproducer if required.
|        - Close the upstream [bug] with 'Fix released', including the
|          commit SHA-1 of the fix.
... 
| >  Email sent to us is read and acknowledged with a non-automated response. 
For
| >  issues that are complicated and require significant attention, we will 
open an
| 
|    ^^^ You can remove that, as now covered by bullet 0).

Okay, will do. Thank you.
--
Prasad J Pandit / Red Hat Product Security Team
8685 545E B54C 486B C6EB 271E E285 8B5A F050 DE8D