Re: [Ejbca-develop] Ticket policy for security issues

[Tomas G. <to...@pr...>]

Hi Michael,

Currently the policy is to not reveal details of the issue. Since 
upgrades of this type of software is typically slower uptake than in 
most softwares.

Cheers,
Tomas

On 2014-10-15 13:44, Michael Ströder wrote:
> HI!
>
> I can understand that tickets regarding security issues are only visible to
> certain users before they get fixed.
>
> But what happens *after* a fix was released?
> What is the EJBCA project's policy?
>
> I'm asking because I was wondering about a CLOSED security issue ticket still
> not being visible:
>
> https://jira.primekey.se/browse/ECA-3615
>
> Ciao, Michael.
>
>
>
> ------------------------------------------------------------------------------
> Comprehensive Server Monitoring with Site24x7.
> Monitor 10 servers for $9/Month.
> Get alerted through email, SMS, voice calls or mobile push notifications.
> Take corrective actions from your mobile device.
> http://p.sf.net/sfu/Zoho
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>