Security/B2G/VulnerabilityManagement: Difference between revisions

Security/B2G/VulnerabilityManagement (view source)

36 bytes removed , 11 June 2015

Confirmed users

184

edits

@@ Line 49: / Line 49: @@
 This is the list with all security bugs that have '''status-b2g-v2.2 set to affected, verified or fixed''', or has a '''[b2g-adv-main2.2*]''' tag on the whiteboard. It is intended as superset for advisory candidates for the 2.2 release.
-===== [http://mzl.la/1eQTNSK Sec-Advisory-Needed B2G 2.2] =====
+===== [http://mzl.la/1Mt6X34 Sec-Advisory-Undecided B2G 2.2] =====
-These are all security bugs '''confirmed to be affecting 2.2''', but without an '''[adv-*''' tag on whiteboard.
+These are all security bugs '''rated high or critical''' and '''affecting 2.2''', but without an '''[adv-*+]''', '''[bg2-adv-man2.2+]''' or '''[bg2-adv-man2.2-]''' tag on whiteboard.
-This list needs special scrutiny after we're confident that all security bugs have gotten a proper status-b2g-v2.2 classification.
+This list is the main focus for our work. '''If Bugs don't appear here, we will likely miss them.'''
-'''TODO''': list of whiteboard tags we use and their meaning
+This list ideally is empty.
-'''TODO''': query needs update for [b2g-adv-*]
 ===== [http://mzl.la/1B5nOsg Sec-Has-Advisory B2G 2.2] =====