Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

What is the process for fixing a security bug?

April 26, 2017bug fixing process security

0

Posted

What is the process for fixing a security bug?

1 Answer

0

Posted

• Work on the fix must proceed as quietly as possible, with discussion restricted to members of the security team. Code reviews will be performed as usual with the audience restricted to the security team. • Once a fix has been produced and tested, important users will be pre-notified. These users will be allowed to apply the patch before the bug becomes public knowledge. • The bug and the fix must be announced and made available simultaneously (or as close to simultaneous as possible).