Re: [mantisbt-dev] Tracking of security issues having CVEs

[Victor B. <vb...@gm...>]

Sounds good to me.  We should just make sure that the title for both bugs is readable not just a reference to the CVE #.

> On Jan 23, 2015, at 12:35 PM, Roland Becker <ro...@at...> wrote:
> 
> Seems this approach has been used in the past
> 
> https://www.mantisbt.org/bugs/view.php?id=6724
> https://www.mantisbt.org/bugs/view.php?id=7743
> 
> https://www.mantisbt.org/bugs/view.php?id=8153
> https://www.mantisbt.org/bugs/view.php?id=8154
> 
>> Damien Regad <dr...@ma...> hat am 23. Januar 2015 um 17:13
>> geschrieben:
>> 
>> 
>> Hello again,
>> 
>> I'd like your input in terms of handling / tracking of important, publicly
>> announced security issues (i.e having a CVE) that affect multiple versions.
>> 
>> In the past, we only had a single issue in our tracker, with target/fixed in
>> version set to the oldest version (i.e. 1.2.x), and it was implied that the
>> fix was also implemented in later releases. 
>> 
>> This was not a problem before an "official" release for 1.3 was published,
>> but now that we have the beta out, I'm wondering if we should not create
>> "dummy" issues as clones/duplicates of the "main" ones for 1.2, but with
>> target/fixed version set to 1.3.x. This way the CVE IDs would appear on the
>> change log / roadmap.
>> 
>> Thoughts ?
>> 
>> 
>> 
>> 
>> ------------------------------------------------------------------------------
>> New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
>> GigeNET is offering a free month of service with a new server in Ashburn.
>> Choose from 2 high performing configs, both with 100TB of bandwidth.
>> Higher redundancy.Lower latency.Increased capacity.Completely compliant.
>> http://p.sf.net/sfu/gigenet
>> _______________________________________________
>> mantisbt-dev mailing list
>> man...@li...
>> https://lists.sourceforge.net/lists/listinfo/mantisbt-dev
> 
> ------------------------------------------------------------------------------
> New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
> GigeNET is offering a free month of service with a new server in Ashburn.
> Choose from 2 high performing configs, both with 100TB of bandwidth.
> Higher redundancy.Lower latency.Increased capacity.Completely compliant.
> http://p.sf.net/sfu/gigenet
> _______________________________________________
> mantisbt-dev mailing list
> man...@li...
> https://lists.sourceforge.net/lists/listinfo/mantisbt-dev