Encourage the use of RT to contact the security team.

Patch from Thijs Kinkhorst. Closes: #610782

git-svn-id: svn://anonscm.debian.org/ddp/manuals/trunk/developers-reference@8905 313b444b-1b9f-4f58-a734-7bb04f332e8d

diff --git a/debian/changelog b/debian/changelog
index a60b7bbc278a4989217bc902b4632ef6f09c92bb..e0a2cf6c1e5a6042aa0a67383de178d28f06907a 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -6,8 +6,10 @@ developers-reference (3.4.6) UNRELEASED; urgency=low
 
   [ Lucas Nussbaum ]
   * Update my email address.
+  * Encourage the use of RT to contact the security team.
+    Patch from Thijs Kinkhorst. Closes: #610782
 
- -- Lucas Nussbaum <lucas@debian.org>  Sat, 30 Jul 2011 15:49:22 +0200
+ -- Lucas Nussbaum <lucas@debian.org>  Sat, 30 Jul 2011 15:52:49 +0200
 
 developers-reference (3.4.5) unstable; urgency=low
 

diff --git a/pkgs.dbk b/pkgs.dbk
index be92f98bf7ad41eb35d6356c844eadaf7443d4f5..55316de0887253634946fbffa3dbfb1c9e246efc 100644 (file)
--- a/pkgs.dbk
+++ b/pkgs.dbk
@@ -841,14 +841,22 @@ fixing them themselves, sending security advisories, and maintaining
 <para>
 When you become aware of a security-related bug in a Debian package, whether or
 not you are the maintainer, collect pertinent information about the problem,
-and promptly contact the security team at
-&email-security-team; as soon as possible.  <emphasis
-role="strong">DO NOT UPLOAD</emphasis> any packages for <literal>stable</literal>
-without contacting the team.  Useful information includes, for example:
+and promptly contact the security team, preferedly by filing a ticket in
+their Request Tracker.
+See <ulink url="http://wiki.debian.org/rt.debian.org#SecurityTeam"></ulink>.
+Alternatively you may email &email-security-team;.
+<emphasis role="strong">DO NOT UPLOAD</emphasis> any packages for
+<literal>stable</literal> without contacting the team.  Useful information
+includes, for example:
 </para>
 <itemizedlist>
 <listitem>
 <para>
+Whether or not the bug is already public.
+</para>
+</listitem>
+<listitem>
+<para>
 Which versions of the package are known to be affected by the bug.  Check each
 version that is present in a supported Debian release, as well as
 <literal>testing</literal> and <literal>unstable</literal>.