[PATCH 0/3] Documentation: security-bugs: new updates covering triage and AI

Willy Tarreau
2026-04-26T16:47:42Z

This series tries to translate recent discussions on the security list
on how to better handle reports. It details:
- when not to Cc: the security list
- what classes of bugs do not need to be handled privately
- minimum requirements for AI-assisted reports

As usual, this is probably perfectible but can already help in the short
term as we can point it to reporters, so barring any strong disagreement,
better continue to proceed in small incremental improvements and observe
the effects.

Thanks!
Willy

---
Willy Tarreau (3):
Documentation: security-bugs: do not systematically Cc the security
team
Documentation: security-bugs: explain what is and is not a security
bug
Documentation: security-bugs: clarify requirements for AI-assisted
reports

Documentation/process/security-bugs.rst | 131 ++++++++++++++++++++++--
1 file changed, 120 insertions(+), 11 deletions(-)

--
2.52.0