From 0255a0e19d12951fef67e64cd5480b4d094c0552 Mon Sep 17 00:00:00 2001 From: Stan Ulbrych Date: Thu, 28 May 2026 16:00:32 +0100 Subject: [PATCH] PSRT: Add link to policy to 'Submit using GitHub Security Advisories' template --- security/psrt.rst | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/security/psrt.rst b/security/psrt.rst index 04dd891b3..6a869de6a 100644 --- a/security/psrt.rst +++ b/security/psrt.rst @@ -236,13 +236,13 @@ This patch can then be applied and pushed to the public GitHub repository: git apply ./ghsa-abcd-efgh-ijkl.patch git push origin branch-name -.. warning:: **IMPORTANT:** CPython's backport infrastructure +.. important:: CPython's backport infrastructure is used for tracking backported patches. Use **one GitHub issue per CVE** to accurately track backports of vulnerability fixes. For new CVEs, even when related to a previous issue, **open a new GitHub issue** to accurately track fixed versions. -.. warning:: **IMPORTANT:** Don't select the green 'Merge pull request' +.. important:: Don't select the green 'Merge pull request' or 'Publish advisory' buttons within GHSA. Advisories are published to the mailing list, and the 'Merge pull request' button within GHSA bypasses all continuous integration and branch protection @@ -323,7 +323,11 @@ Submit using GitHub Security Advisories Thanks for submitting this report. We use GitHub Security Advisories for triaging vulnerability reports, - please submit your report here: + please review our security policy before submitting: + + https://devguide.python.org/security/policy/ + + Then submit your report here: https://github.com/python/cpython/security/advisories/new