The best way to receive all the security announcements is to subscribe to the Rust security announcements mailing list (alternatively by sending an email to { -rustlang-security-announcements-subscribe-anchor }). The mailing list is very low traffic, and it receives the public notifications the moment the embargo is lifted.
We will announce vulnerabilities 72 hours before the embargo is lifted to { -distros-openwall-email-anchor }, so that Linux distributions can update their packages.
-security-crates-heading = Ecosystem security help for crate authors -security-crates-description = -Security is a value important to the Rust ecosystem as a whole, not just to the Rust language. If you are a crate author and you have received a high impact/severity security bug report for your crate, the Rust Foundation and the Rust Project are available to help manage the situation. The Rust Project or the Rust Foundation may also be the ones reaching out to you, if they have been informed of a security issue.
-As part of its Security Initiative, the Rust Foundation:
-The Rust Project can coordinate actions among other parts of the ecosystem that may need to be updated to address a fix.
-Please reach out to { -contact-at-rustfoundation-org-anchor } if either the Rust Project or the Rust Foundation can help you by providing security support in the areas listed above or in another way! These are just a few examples of the kind of help available to crate authors facing security challenges.
- security-pgp-key-heading = Plaintext PGP key diff --git a/templates/policies/security.html.hbs b/templates/policies/security.html.hbs index b0ee3aef..ebd07225 100644 --- a/templates/policies/security.html.hbs +++ b/templates/policies/security.html.hbs @@ -50,16 +50,6 @@ -