[platform-dev] Process for a security/bugfix release for the Eclipse Platform

2023-07-18 Thread Marta Rybczynska via platform-dev
Hello, Eclipse platform has been releasing every three month for some time. I've been recently working on clarifying security processes and I could not find a description how the Eclipse Platform handles a security release. Would a security fix need to wait for next 3-month release? This could be

Re: [platform-dev] [platform-releng-dev] Process for a security/bugfix release for the Eclipse Platform

2023-07-18 Thread Mickael Istria via platform-dev
Hi, On Tue, Jul 18, 2023 at 6:04 PM Marta Rybczynska via platform-releng-dev < platform-releng-...@eclipse.org> wrote: > Would a security fix need to wait for next 3-month release? This could be > in conflict with the 90 days vulnerability release policy. Consider this > scenario: > - A