> -----Original Message----- > From: Kay sch...@apache.org [mailto:ksch...@apache.org] > Sent: Monday, August 15, 2016 08:59 > To: dev@openoffice.apache.org > Subject: Re: [PATCH DOWNLOAD] Draft for the hotfix webpage > > > > On 08/13/2016 02:16 PM, Marcus wrote: > > As we have now the patched library file and Readme for all platforms, > > IMHO not much more is needed to go public with the hotfix. Therefore > > I've created a draft version of the hotfix download webpage: > > > > http://dist.apache.org/repos/dist/dev/openoffice/4.1.2- > patch1/hotfix.html > > > > Please review and tell me your feedback. [orcmid]
I have a number of items. I can fix the URLs in (2) below after I have updated the Windows set. 1. This is worded as if it is the advisory. I assume this is, rather, something that should be linked to from an update of the advisory. I request that it be a description of the HotFix. It could link to the advisory, of course. RECOMMENDATION: Have the emphasis be on this describing release of the hotfix for CVE-2016-1513. 2. Download and Installation. Currently, this page is at <https://dist.apache.org/repos/dist/dev/openoffice/4.1.2-patch1/hotfix.html>. It has *ABSOLUTE* URLs to the binaries and source and the various hashes. WHEN GENERAL DISTRIBUTION OCCURS, this page and all of the binaries and source pages will be at <https://archive.apache.org/dist/openoffice/4.1.2-patch1>. RECOMMENDATION: In the Download & Installation table, make all URLS *RELATIVE* to the HotFix page, since when it is staged to release and then to archive, the links will always work. NOTE. When we make general distribution, we stage the HotFix HTML page and the binaries subfolder to <https://dist.apache.org/repos/dist/release/openoffice/4.1.2-patch1> using SVN copies. In 24-48 hours or so that material will show up automatically on archive.apache.org and we can make the general distribution announcement. The dist.apache.org materials can be removed when that happens. WARNING. The Windows material is not ready, and some renaming will happen. That should all be done by the end of Tuesday (GMT). 3. Next Step under Download and Installation. The README for Windows addresses the way to Unzip and provides important information about how the extract is into a folder of a default-determined name. I don't know if the others provide comparable information and/or operating from a terminal is assumed. 4. How to verify the download & installation. Verifying the Zip is sufficient. The table does not identify the files those check cases are from so it is not at all clear what value this is. RECOMMENDATION: If it is valuable, we should include the additional hashes inside the Zips, and provide the size and time stamp information in the individual README files. That way there is no redundancy and the information is maintained in exactly one place. - Dennis > > > > Thanks > > > > Marcus > > Looks good to me. > > > -- > Kay Schenk > Apache OpenOffice > > ---------------------------------------- > "Things work out best for those who make > the best of the way things work out." > -- John Wooden > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org > For additional commands, e-mail: dev-h...@openoffice.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
