VULN-DISCLOSURE-POLICY.md: the distros list wants <= 7 days embargo

Closes #17497

diff --git a/docs/VULN-DISCLOSURE-POLICY.md b/docs/VULN-DISCLOSURE-POLICY.md
index 23deb6b8fa2680c01e96fb592f33f08cb084d232..9dd349298e54d25554704bb62c17e9a92d7c9dfe 100644 (file)
--- a/docs/VULN-DISCLOSURE-POLICY.md
+++ b/docs/VULN-DISCLOSURE-POLICY.md
@@ -80,7 +80,7 @@ announcement.
   Bounty team and the reporter is asked to request the reward from them after
   the issue has been completely handled and published by curl.
 
-- No more than 10 days before release, inform
+- No more than seven days before release, inform
   [distros@openwall](https://oss-security.openwall.org/wiki/mailing-lists/distros)
   to prepare them about the upcoming public security vulnerability
   announcement - attach the advisory draft for information with CVE and