Skip to content

security: Update the 'Candidate release patches' email template #19785

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
RyanTheOptimist merged 1 commit into from
Feb 3, 2022
Merged

security: Update the 'Candidate release patches' email template #19785

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 12 additions & 5 deletions security/email-templates.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -74,13 +74,20 @@ Cc: envoy-security@googlegroups.com

Hello Envoy Distributors,

Please find attached candidate patches for CVE-YEAR-ABCDEF. You may use the
attached patches for testing and preparing your distributions. The patches can
be applied with "git am".
Please find attached candidate patches for the CVEs listed below. The patches will
be publicly released on the $ORDINALDAY of $MONTH $YEAR.

Patches starting with "$VERSION" should be applied against the $OLDVERSION release.
* CVE-YEAR-ABCDEF (CVSS score $CVSS, $SEVERITY): Envoy $AFFECTED_VERSIONS - $CVESUMMARY

Patches starting with "master-" should be applied against commit $COMMIT.
Be aware that these patches have been tested and validated against the tests checking
for susceptibility of the CVEs, but please report any potential problems if encountered
in your CI infrastructures to envoy-security@googlegroups.com.

You may use the attached patches for testing and preparing your distributions. The
patches can be applied with "git am". The attached archive contains the following:

* main-$MAINCOMMIT directory with patches applied to main branch commit $MAINCOMMIT
* $VERSION directory with patches applied to branch release/$VERSION

As a reminder, these patches are under embargo until $ORDINALDAY of $MONTH $YEAR
at $PDTHOUR PDT ($GMTHOUR GMT). The information below should be treated as
Expand Down