Re: [edk2-devel] [RFC] Propose update of security bug handling process

2019-04-15 Thread Andrew Fish via Groups.Io
AM >> To: Wang, Jian J mailto:jian.j.w...@intel.com>>; >> devel@edk2.groups.io <mailto:devel@edk2.groups.io> >> Cc: Zimmer, Vincent > <mailto:vincent.zim...@intel.com>>; Cetola, Stephano >> mailto:stephano.cet...@intel.com>>; Gao, Liming >> mai

Re: [edk2-devel] [RFC] Propose update of security bug handling process

2019-04-15 Thread Wang, Jian J
half Of > >> Laszlo Ersek > >> Sent: Friday, April 12, 2019 8:52 PM > >> To: Wang, Jian J > >> Cc: devel@edk2.groups.io; Zimmer, Vincent ; > >> Cetola, Stephano ; Gao, Liming > >> > >> Subject: Re: [edk2-devel] [RFC] Propose upda

Re: [edk2-devel] [RFC] Propose update of security bug handling process

2019-04-15 Thread Vincent Zimmer
Cc: Zimmer, Vincent ; Cetola, Stephano ; Gao, Liming Subject: RE: [edk2-devel] [RFC] Propose update of security bug handling process Laszlo, > -Original Message- > From: devel@edk2.groups.io [mailto:devel@edk2.groups.io] On Behalf Of > Laszlo Ersek > Sent: Friday, April 12, 2019

Re: [edk2-devel] [RFC] Propose update of security bug handling process

2019-04-15 Thread Laszlo Ersek
l@edk2.groups.io; Zimmer, Vincent ; >> Cetola, Stephano ; Gao, Liming >> >> Subject: Re: [edk2-devel] [RFC] Propose update of security bug handling >> process >> >> (Dropping b...@edk2.groups.io from the address >> list, as that should be a list to

Re: [edk2-devel] [RFC] Propose update of security bug handling process

2019-04-14 Thread Wang, Jian J
t; Subject: Re: [edk2-devel] [RFC] Propose update of security bug handling > process > > (Dropping b...@edk2.groups.io from the address > list, as that should be a list to receive automated Bugzilla email.) > > On 04/12/19 10:43, Wang, Jian J wrote: > > Hi, > > &

Re: [edk2-devel] [RFC] Propose update of security bug handling process

2019-04-12 Thread Laszlo Ersek
(Dropping b...@edk2.groups.io from the address list, as that should be a list to receive automated Bugzilla email.) On 04/12/19 10:43, Wang, Jian J wrote: > Hi, > > Currently, we generally follow below process to handle security bugs. > But there're no document to describe the detailed working f

[edk2-devel] [RFC] Propose update of security bug handling process

2019-04-12 Thread Wang, Jian J
Hi, Currently, we generally follow below process to handle security bugs. But there're no document to describe the detailed working flow. There're also discussions on lacking of important information, poor issue description and no timely notification on update, etc. "0 - New Security Bug"