Mercurial > vim

changeset 33648:13e4398925ea

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
please report security issues to the vim-security list Commit: https://github.com/vim/vim/commit/50f3ec2898a43feaa6add2bc4875754cf9224d5e Author: Christian Brabandt <cb@256bit.org> Date: Mon Oct 23 19:59:22 2023 +0200 please report security issues to the vim-security list Signed-off-by: Christian Brabandt <cb@256bit.org>
author Christian Brabandt <cb@256bit.org>
date Mon, 23 Oct 2023 20:15:03 +0200
parents 3da00d519504
children 88cad94caef9
files .github/ISSUE_TEMPLATE/bug_report.yml SECURITY.md
diffstat 2 files changed, 8 insertions(+), 3 deletions(-) [+]
line wrap: on
line diff
--- a/.github/ISSUE_TEMPLATE/bug_report.yml
+++ b/.github/ISSUE_TEMPLATE/bug_report.yml
@@ -9,8 +9,10 @@ body:
       value: |
         Thanks for reporting issues of Vim!
 
-        If you want to report a security issue, instead of reporting it here
-        please disclose it privately to cb@256bit.org
+        If you want to report a security issue, instead of reporting it here publicly,
+        please disclose it privately via mail to vim-security@googlegroups.com.
+        (It's a private list read only by the maintainers,
+        but anybody can post, after moderation.)
         
         To make it easier for us to help you please enter detailed information below.
   - type: textarea
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -2,6 +2,9 @@
 
 ## Reporting a vulnerability
 
-If you want to report a security issue, please privately disclose the issue to the current maintainer cb@256bit.org
+If you want to report a security issue, please privately disclose the issue to the vim-security mailing list
+vim-security@googlegroups.com
+
+This is a private list, read only by the maintainers, but anybody can post, after moderation.
 
 **Please don't publicly disclose the issue until it has been addressed by us.**