pitrou opened a new pull request, #55271: URL: https://github.com/apache/arrow/pull/55271
### Rationale for this change We often get private security reports for some issues which don't threaten confidentiality or integrity. For these kinds of issues, we would rather have them reported through the usual public means, as it follows our open development principles more closely, and lessens the required paperwork (no CVE, etc.). ### What changes are included in this PR? Add a paragraph in the C++ security model about what should be reported as a security vulnerability vs. a regular bug. ### Are these changes tested? N/A. ### Are there any user-facing changes? No. ### Was AI used for this PR? In accordance to the [AI generation guidelines](https://arrow.apache.org/docs/dev/developers/overview.html#ai-generated-code), please disclose below whether and how AI was used in this PR. **PR code and description written by:** - [ ] Human - [ ] AI **Reviewed before submission by:** - [ ] Human - [ ] AI - [ ] Not reviewed -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
