Security/Firefox/Security Bug Life Cycle/Security Advisories: Difference between revisions

Jump to navigation Jump to search
(Created page with "== Background == This page documents the process to create security advisories for Firefox. If you're looking for what the advisories actually are; you want to go to https:/...")
 
Line 51: Line 51:
Using TODOXXX this script, generate a first-pass at the .yml file.
Using TODOXXX this script, generate a first-pass at the .yml file.


Go through and review it. For the first pass, I recommend edits be made directly on the advisory.txt attachments. However, certain edits will not be possible to do there. Specifically: editing the list of reporters in the rollup advisory. That must be done manually and cannot be done in-bug.
Go through and review it. For the first pass, I recommend edits be made directly on the advisory.txt attachments. However, certain edits will not be possible to do there. Specifically: adding (or removing) the description field from the top of the document and editing the list of reporters in the rollup advisory.


=== Get review ===
=== Get review ===
130

edits

Navigation menu