--- CONTRIBUTING | 3 +++ NEWS | 4 ++++ 2 files changed, 7 insertions(+) diff --git a/CONTRIBUTING b/CONTRIBUTING index 8488a58..5373354 100644 --- a/CONTRIBUTING +++ b/CONTRIBUTING @@ -26,6 +26,9 @@ to work well. Additions to data should contain commentary citing reliable sources as justification. Citations should use https: URLs if available. +For changes that fix sensitive security-related bugs, please see the +file SECURITY. + Please submit changes against either the latest release in <https://www.iana.org/time-zones> or the main branch of the development repository. The latter is preferred. If you use Git the following diff --git a/NEWS b/NEWS index de7d08c..7314421 100644 --- a/NEWS +++ b/NEWS @@ -26,6 +26,10 @@ Unreleased, experimental changes (Thanks to P Chan, Michael Deckers, Alexander Krivenyshev and Alois Treindl.) + Changes to maintenance procedure + + The new file SECURITY covers how to report security-related bugs. + Changes to code zic now creates each output file or link atomically, -- 2.27.0