Re: Change from ad-hoc/historical security process to ASF process?

[Jacob Champion]

On 05/05/2017 01:32 PM, Jim Jagielski wrote:

+1... Lets do it.

BTW, I would adjust #16 to include:

   Add the CVE to the CHANGES file.

That way, it's still documented in CHANGES, just after the release
is spun out, show it shows up in the next release's CHANGES.

Sounds good to me.

--Jacob