[Kolab-devel] [issue850] security bug fix policy nowhere mentioned on www.kolab.org

[Achim Bohnet]

New submission from Achim Bohnet <ach at mpe.mpg.de>:

For every important software (like kolab ;) it        
should be clear to the admins, what has to be done        
to get security bugs fixed.        
        
So I suggest to add a link next to 'download'        
explaining the topic.        
        
If searched the forums and asked on #kolab about        
this issue.   Here's my summary as a draft for        
such a 'security' page:        
               
Between kolab releases please check         
www.openpkg.org for security advisories and        
update pkg necessary for kolab.        
        
Please make sure that you only update pkgs        
that do not match *kolab*  because those pkgs        
contain kolab specific changes and replacing       
them with the openpkg version will break kolab.       
       
The kolab pkg will be fixed with the next       
kolab (bugfix) release.  Kolab releases are    
announced on kolab-announce mailing list   
(http://www.kolab.org/mailman/listinfo/kolab-announce)

----------
messages: 5150
nosy: ach
priority: bug
status: unread
title: security bug fix policy nowhere mentioned on www.kolab.org
________________________________________________
Kolab issue tracker <kolab-issues at intevation.de>
<https://intevation.de/roundup/kolab/issue850>
________________________________________________