From 9c258936e7638e9e39976ae6afdc0b05a3065e16 Mon Sep 17 00:00:00 2001 From: Behdad Esfahbod Date: Fri, 14 Apr 2023 11:35:34 -0600 Subject: [PATCH] [SECURITY] Update --- SECURITY.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index d11b87c51..69bb04456 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -7,7 +7,7 @@ used before a patch is released. You may submit the report in the following ways: -- send an email to behdad@behdad.org; and/or +- send an email to behdad@behdad.org and harfbuzz-admin@googlegroups.com; and/or - send me a [private vulnerability report](https://github.com/harfbuzz/harfbuzz/security/advisories/new) Please provide the following information in your report: @@ -15,6 +15,6 @@ Please provide the following information in your report: - A description of the vulnerability and its impact - How to reproduce the issue -This project is mostly maintained by a single developer, working on a reasonable effort -basis. As such, I ask that you give me 90 days to work on a fix before public +This project is mostly maintained by two developers, working on a reasonable effort +basis. As such, we ask that you give us 90 days to work on a fix before public disclosure.