From fa3909504fdb141b4dec01babf4c376274de8940 Mon Sep 17 00:00:00 2001 From: Daniel Bevenius Date: Tue, 29 Jun 2021 08:11:44 +0200 Subject: [PATCH] doc: add cc oss-security@lists.openwall.com This commit adds step to CC oss-security@lists.openwall.com as part of the security release process. PR-URL: https://github.com/nodejs/node/pull/39191 Refs: https://github.com/nodejs/TSC/issues/1047 Reviewed-By: Beth Griggs Reviewed-By: Richard Lau Reviewed-By: Michael Dawson --- doc/guides/security-release-process.md | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/doc/guides/security-release-process.md b/doc/guides/security-release-process.md index d3bdcf0e55ac4d..d2d9ab49e23cc6 100644 --- a/doc/guides/security-release-process.md +++ b/doc/guides/security-release-process.md @@ -43,9 +43,10 @@ information described. * Described in the pre/post announcements * [ ] Pre-release announcement [email][]: ***LINK TO EMAIL*** + * CC: `oss-security@lists.openwall.com` + * Subject: `Node.js security updates for all active release lines, Month Year` + * Body: ```text - Security updates for all active release lines, Month Year - The Node.js project will release new versions of all supported release lines on or shortly after Day of week, Month Day of Month, Year For more information see: https://nodejs.org/en/blog/vulnerability/month-year-security-releases/ ``` @@ -75,9 +76,10 @@ information described. * [ ] [Unlock CI](https://github.com/nodejs/build/blob/HEAD/doc/jenkins-guide.md#after-the-release) * [ ] Post-release announcement in reply [email][]: ***LINK TO EMAIL*** + * CC: `oss-security@lists.openwall.com` + * Subject: `Node.js security updates for all active release lines, Month Year` + * Body: ```text - Security updates for all active release lines, Month Year - The Node.js project has now released new versions of all supported release lines. For more information see: https://nodejs.org/en/blog/vulnerability/month-year-security-releases/ ```