zentol commented on a change in pull request #18746:
URL: https://github.com/apache/flink/pull/18746#discussion_r807901125
##########
File path: docs/content/docs/deployment/security/updates.md
##########
@@ -0,0 +1,73 @@
+---
Review comment:
That's decided on a case-by-case basis.
Generally speaking we aim to publish vulnerabilities once a mitigation is in
place (either a new release or patch, depending on the severity).
In the case of Log4j we communicated it right away because the cat was out
of the bag already at that point.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
