2 files changed, 18 insertions, 5 deletions
diff --git a/dev/doc/critical-bugs b/dev/doc/critical-bugs
index 79c2155823..4452baf513 100644
--- a/dev/doc/critical-bugs
+++ b/dev/doc/critical-bugs
@@ -332,6 +332,18 @@ Conversion machines
   GH issue number: ocaml/ocaml#6385, #11170
   risk: unlikely to be activated by chance, might happen for autogenerated code
 
+  component: "virtual machine" (compilation to bytecode ran by a C-interpreter)
+  summary: buffer overflow, arbitrary code execution on floating-point operations
+  introduced: 8.13
+  impacted released versions: 8.13.0
+  impacted coqchk versions: none (no virtual machine in coqchk)
+  fixed in: 8.13.1
+  found by: Melquiond
+  GH issue number: #13867
+  risk: none, unless using floating-point operations; high otherwise;
+        noticeable if activated by chance, since it usually breaks
+        control-flow integrity
+
 Side-effects
 
   component: side-effects
diff --git a/dev/doc/release-process.md b/dev/doc/release-process.md
index e450cd2b8b..57c325f698 100644
--- a/dev/doc/release-process.md
+++ b/dev/doc/release-process.md
@@ -153,11 +153,10 @@
 - [ ] Publish a release on GitHub with the PDF version of the
   reference manual attached.
 
-## Once the final release is published ##
+## For each non-preview release ##
 
-Ping `@Zimmi48` to:
-
-- [ ] Switch the default version of the reference manual on the website.
+- [ ] Ping `@Zimmi48` to switch the default version of the reference
+  manual on the website.
 
   This is done by logging into the server (`vps697916.ovh.net`),
   editing two `ProxyPass` lines (one for the refman and one for the
@@ -168,7 +167,9 @@ Ping `@Zimmi48` to:
   repository. See [coq/www#111](https://github.com/coq/www/issues/111)
   and [coq/www#131](https://github.com/coq/www/issues/131).
 
-- [ ] Publish a new version on Zenodo (only once per major version).
+## Only for the final release of each major version ##
+
+- [ ] Ping `@Zimmi48` to publish a new version on Zenodo.
 
   *TODO:* automate this with coqbot.