On 2014-08-31, Gary Gregory wrote:

> Great idea!

> Every Commons component should have such a page indeed, can be a link
> to the same page for all of Commons IMO.

> Some changes though are needed.

> It should be made clearer that there is an important distinction
> between undisclosed and disclosed issues. 

http://commons.staging.apache.org/security.html

Not live and not linked from the navigation, either, just something to
get us going.

I volunteer to look through the components to see whether there are more
potential links - and to list components that should contain lists of
fixed issues but currently don't (fileupload hasn't got any security
page even though at least two CVEs have been addressed).

Stefan

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org

Reply via email to