...
- Create new Jira ticket and post embargo notice and the content of original message re-encrypted with public keys of other VMS members. (email recipient)
- Add "Uncategorised" label to the ticket (email recipient)
- Assign the task to one of VMS members (capable of decrypting the bug content) (email recipient)
- Send a PGP signed reception confirmation email (DO NOT include the original message in plain text). (email recipient)
...
- Set up disclosure date with the reporter, PTL and required committers.
- Add note about planned disclosure date to the ticket
- Send a PGP signed email with vulnerability description to downstream stakeholders.
...