278303 - Post Security Advisory for 2.16.7/2.18rc3/2.19.1 on bugzilla.org

Status: RESOLVED FIXED

(Bugzilla :: bugzilla.org, defect)

Description

[Max Kanat-Alexander]

The SecAdv that justdave sent out needs to be posted on the web site.

Comment 1

[Max Kanat-Alexander]

Attachment: For /security/2.16.7/

Here's the security advisory. It's index.html.tmpl in a new directory, which
will be /security/2.16.7/.

Comment 2

[Max Kanat-Alexander]

Attachment: /security/2.16.7/ (v2)

Oh, actually, I had slight errors in the headers. This one's corrected.

Comment 3

[Dave Miller [:justdave]]

OK, this is done and on the live site.  This should have been put up last week
anyway, and I was lax to leave it this long.

Changes made while checking in:  unescaped the leftover artifacts from the PGP
signature, and removed the duplicate header off the top so it matches previous
security updates.  Added links to it to the /security/ page and the
/releases/2.18/ page.  Also added a news item for it on /news/ and on the home page.

Comment 4

[Dave Miller [:justdave]]

oh, also, the directory it went into was named 2.16.7-nr to indicate that there
was no release associated with the advisory (patches only), which follows the
existing naming pattern from the last time we did a patch-only advisory.