diff --git a/README.md b/README.md index 3ddfdaa3f..613f47ee2 100644 --- a/README.md +++ b/README.md @@ -82,8 +82,9 @@ To submit a new project: Following [Google's standard disclosure policy](https://googleprojectzero.blogspot.com/2015/02/feedback-and-data-driven-updates-to.html) OSS-Fuzz will adhere to following disclosure principles: - - **90-day deadline**. After notifying project authors, we will open reported - issues to the public in 90 days, or 7 days after the fix is released. + - **Deadline**. After notifying project authors, we will open reported + issues to the public in 90 days, or 30 days after the fix is released + (whichever comes earlier). - **Weekends and holidays**. If a deadline is due to expire on a weekend, the deadline will be moved to the next normal work day. - **Grace period**. We have a 14-day grace period. If a 90-day deadline