summaryrefslogtreecommitdiff
path: root/docs/internals
diff options
context:
space:
mode:
authorTim Graham <timograham@gmail.com>2015-05-25 08:31:51 -0400
committerTim Graham <timograham@gmail.com>2015-05-25 08:31:51 -0400
commit46ce72e8d2588bf62e4d4e7f08019e7ad2ef0fe6 (patch)
treedb8f9e660b8ca920b6b7c386fc4dec2d00a07473 /docs/internals
parent0b0bb6100d90d387d7f38e87a4051a1ef513b7c7 (diff)
Added oss-security@lists.openwall.com to security release announcements.
Diffstat (limited to 'docs/internals')
-rw-r--r--docs/internals/howto-release-django.txt7
-rw-r--r--docs/internals/security.txt4
2 files changed, 6 insertions, 5 deletions
diff --git a/docs/internals/howto-release-django.txt b/docs/internals/howto-release-django.txt
index f6c63bcad3..3f9735a596 100644
--- a/docs/internals/howto-release-django.txt
+++ b/docs/internals/howto-release-django.txt
@@ -341,9 +341,10 @@ Now you're ready to actually put the release out there. To do this:
database (this will automatically flip it to ``False`` for all
others); you can do this using the site's admin.
-#. Post the release announcement to the |django-announce|,
- |django-developers|, and |django-users| mailing lists. This should
- include links to the announcement blog post.
+#. Post the release announcement to the |django-announce|, |django-developers|,
+ and |django-users| mailing lists. This should include a link to the
+ announcement blog post. If this is a security release, also include
+ oss-security@lists.openwall.com.
Post-release
============
diff --git a/docs/internals/security.txt b/docs/internals/security.txt
index b4207ab951..f90f923f14 100644
--- a/docs/internals/security.txt
+++ b/docs/internals/security.txt
@@ -112,8 +112,8 @@ On the day of disclosure, we will take the following steps:
relevant patches and new releases, and crediting the reporter of
the issue (if the reporter wishes to be publicly identified).
-4. Post a notice to the |django-announce| mailing list that links to the blog
- post.
+4. Post a notice to the |django-announce| and oss-security@lists.openwall.com
+ mailing lists that links to the blog post.
.. _the Python Package Index: https://pypi.python.org/pypi
.. _the official Django development blog: https://www.djangoproject.com/weblog/