Merge pull request #781 from raspberrypi/develop

Security mailing list and other fixes

Author: mudge

documentation/asciidoc/accessories/cm5-programming-jig/about.adoc

@@ -163,7 +163,7 @@ With Imager configured to use the custom content repository, you can now write t
 
 . Connect power to the jig.
 +
-The jig boots into USB mass-storage mode. Your computer detects the jig's internal storage as a removable drive.
+The jig boots into USB mass storage mode. Your computer detects the jig's internal storage as a removable drive.
 
 . Open Raspberry Pi Imager on your computer.
 

documentation/asciidoc/accessories/usb/about.adoc

@@ -115,7 +115,7 @@ The `-d sat,12` option instructs `smartctl` to communicate with the USB controll
 
 The following table describes the SMART attributes reported by the Raspberry Pi Flash Drive. Attributes marked as *Unused* are reserved and don't report any information.
 
-NOTE: `smartmontools` doesn't assign vendor-unique field names to USB devices because the application treats USB mass-storage devices as a bridge to an ATA hard drive.
+NOTE: `smartmontools` doesn't assign vendor-unique field names to USB devices because the application treats USB mass storage devices as a bridge to an ATA hard drive.
 
 .SMART attributes reported by the Raspberry Pi Flash Drive
 [cols="1,1,3,4, options="header"]

documentation/asciidoc/computers/configuration/reference.adoc

@@ -1167,7 +1167,7 @@ The following properties are defined if the system was booted from USB. These ca
 
 `root-hub-port-number`:: The root hub port number that the boot device is connected to – possibly through other USB hubs.
 
-`lun`:: The Logical Unit Number for the mass-storage device.
+`lun`:: The Logical Unit Number for the mass storage device.
 
 ===== NVMEM nodes
 

documentation/asciidoc/computers/getting-started/install.adoc

@@ -20,9 +20,9 @@ To install an OS on a storage device, you need:
 [[imager-install]]
 === Install using Imager
 
-Raspberry Pi Imager is a tool you use to download and write OS images for your Raspberry Pi on Mac, Windows, and Linux. 
+Raspberry Pi Imager is a tool you use to download and write OS images for your Raspberry Pi on Mac, Windows, and Linux.
 
-Imager includes many popular OS images for Raspberry Pi devices, and supports loading images that have been manually downloaded from either https://www.raspberrypi.com/software/operating-systems/[Raspberry Pi] or third-party vendors such as https://ubuntu.com/download/raspberry-pi[Ubuntu]. 
+Imager includes many popular OS images for Raspberry Pi devices, and supports loading images that have been manually downloaded from either https://www.raspberrypi.com/software/operating-systems/[Raspberry Pi] or third-party vendors such as https://ubuntu.com/download/raspberry-pi[Ubuntu].
 
 During configuration with Imager, you can also preconfigure credentials and remote access settings for your Raspberry Pi device.
 
@@ -42,7 +42,7 @@ Download and install Raspberry Pi Imager on to your computer (Windows, Mac, or L
 . Launch the Raspberry Pi Imager application in one of the following ways:
 * Find Imager in your *Applications* menu.
 * Select the Raspberry Pi Imager icon on your computer's desktop.
-* From the command line, run the AppImage file as root. For example, with the command: `sudo ./Raspberry_Pi_Imager-<version>-desktop-x86_64.AppImage`, where `<version>` is a number representing the most recent Imager version.
+* From the command line, run the AppImage file as root. For example, with the command: `sudo ./imager-<version>-amd64.AppImage`, where `<version>` is a number representing the most recent Imager version.
 
 ==== Step 2. Configure the fundamentals
 
@@ -159,7 +159,7 @@ image::images/imager/os-customisation-site.png[alt="Raspberry Pi Connect page.",
 . In the *New auth key* page, create your auth key. This is a single-use, temporary token. Personal auth keys expire six hours after creation, and organisation auth keys expire between 1 and 90 days after creation (1 day by default). To use the token, boot your Raspberry Pi and connect it to the internet before the expiry time.
 +
 image::images/imager/connect-auth-key.png[alt="Raspberry Pi Connect new auth key page.",width="60%"]
-** If you're a member of one or more organisations, select the organisation or account to associate the key with. Then select *Create auth key and launch Raspberry Pi Imager*. 
+** If you're a member of one or more organisations, select the organisation or account to associate the key with. Then select *Create auth key and launch Raspberry Pi Imager*.
 ** If you're a member of one or more organisations, select the organisation or account to associate the key with. Then select Create auth key and launch Raspberry Pi Imager.
 . Your browser might ask you whether you want to allow the site to open Raspberry Pi Imager. Confirm that you want to open Raspberry Pi Imager.
 ** Imager opens at the *Raspberry Pi Connect* tab, which shows a message to confirm that Imager received the authentication token from the browser and a field containing the token.

documentation/asciidoc/security/security.adoc

@@ -41,6 +41,8 @@ Raspberry Pi lists official security vulnerability disclosures on our website. F
 
 To report security issues on Raspberry Pi, email mailto:security@raspberrypi.com[security@raspberrypi.com]. For more information, see https://www.raspberrypi.com/security/#reporting-a-vulnerability[Reporting a vulnerability].
 
+To be notified by email of significant security vulnerabilities in Raspberry Pi products, subscribe using the https://www.raspberrypi.com/security/#subscribe[Be notified of security vulnerabilities] form on our security page.
+
 == Software Bill of Materials
 
 A Software Bill of Materials (SBOM) lists all components in a software application and includes metadata for each component, such as its name, version, supplier, license, and unique identifier. This information is provided in an open-standard, machine-readable format.

documentation/asciidoc/services/connect/security.adoc

@@ -68,6 +68,13 @@ In January 2025, penetration testing and security analysts at https://cure53.de[
 
 For more details on WebRTC security, see https://webrtc-security.github.io/[A Study of WebRTC Security].
 
+[[security-notifications]]
+=== Security notifications
+
+To be notified by email of significant security vulnerabilities in Raspberry Pi products, including Connect, subscribe using the https://www.raspberrypi.com/security/#subscribe[Be notified of security vulnerabilities] form on our security page.
+
+To report a vulnerability, see https://www.raspberrypi.com/security/#reporting-a-vulnerability[Reporting a vulnerability].
+
 [[sub-processors]]
 === Sub-processors