Policies/Security Policy - Revision history

Yurchor: fix typo

2012-05-29T19:12:30Z

fix typo

Cullmann: Protected "Policies/Security Policy" [edit=sysop:move=sysop]

2006-09-28T17:47:57Z

Protected "Policies/Security Policy" [edit=sysop:move=sysop]

Dhaumann: add to category 'Policies'

2006-09-15T11:33:09Z

add to category 'Policies'

Danimo: Security Policy moved to Policies/Security Policy: Should be a subpage

2006-09-08T17:17:54Z

Security Policy moved to Policies/Security Policy: Should be a subpage

Danimo: Security Policy moved

2006-09-08T17:17:21Z

Security Policy moved

New page

This policy describes how security related issues are handled after they have been reported to [mailto:security@kde.org security@kde.org].

Issues that are brought to the attention of security@kde.org are handled discretely. The issue will be verified and the author/maintainer of the affected code will usually be contacted. If the issue is indeed considered to be a problem the need for an immediate fix is assessed. The security team will notify also affected parties which are known to reuse the affected code.

If an immediate fix is not considered necessary a security alert is issued via http://dot.kde.org, bugtraq and [mailto:kde-announce@kde.org kde-announce@kde.org].

If a fix is considered necessary, KDE release coordinators are contacted and KDE vendor packagers, Linux distributors and other prenotification mailing lists are informed once a fix is available that has passed review on [mailto:security@kde.org security@kde.org]. We then give them a reasonable amount of time to prepare binary packages. After that time we issue a security alert via dot.kde.org, bugtraq and [mailto:kde-announce@kde.org kde-announce@kde.org]. Patches in source form and any available updated binaries are published at the same time.

All security alerts are published on http://www.kde.org/info/security/.

KDE developers that want to join [mailto:security@kde.org security@kde.org] can send a motivated request to [mailto:security@kde.org security@kde.org]. Applications will be evaluated on a case by case basis by the current members. The main criteria is the extent to which someone can be helpful in excuting the security policy as described here. That includes a willingness not to disclose issues prematurely.

@@ Line 9: / Line 9: @@
 All security alerts are published on http://www.kde.org/info/security/.
-KDE developers that want to join [mailto:security@kde.org security@kde.org] can send a motivated request to [mailto:security@kde.org security@kde.org]. Applications will be evaluated on a case by case basis by the current members. The main criteria is the extent to which someone can be helpful in excuting the security policy as described here. That includes a willingness not to disclose issues prematurely.
+KDE developers that want to join [mailto:security@kde.org security@kde.org] can send a motivated request to [mailto:security@kde.org security@kde.org]. Applications will be evaluated on a case by case basis by the current members. The main criteria is the extent to which someone can be helpful in executing the security policy as described here. That includes a willingness not to disclose issues prematurely.
 [[Category:Policies]]

← Older revision		Revision as of 11:33, 15 September 2006
Line 10:		Line 10:

	KDE developers that want to join [mailto:security@kde.org security@kde.org] can send a motivated request to [mailto:security@kde.org security@kde.org]. Applications will be evaluated on a case by case basis by the current members. The main criteria is the extent to which someone can be helpful in excuting the security policy as described here. That includes a willingness not to disclose issues prematurely.		KDE developers that want to join [mailto:security@kde.org security@kde.org] can send a motivated request to [mailto:security@kde.org security@kde.org]. Applications will be evaluated on a case by case basis by the current members. The main criteria is the extent to which someone can be helpful in excuting the security policy as described here. That includes a willingness not to disclose issues prematurely.
		+
		+	[[Category:Policies]]