| Summary: | New GLSAMaker: Update UI | ||
|---|---|---|---|
| Product: | Gentoo Security | Reporter: | Aaron Bauman (RETIRED) <bman> |
| Component: | Misc | Assignee: | Gentoo Security <security> |
| Status: | CONFIRMED --- | ||
| Severity: | normal | CC: | arzano, security |
| Priority: | Normal | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Package list: | Runtime testing required: | --- | |
| Bug Depends on: | |||
| Bug Blocks: | 737962 | ||
Yeah, we should still do most of this, but on new new glsamaker |
Hi, Max. The security team has concurred on a new approach for handling GLSAs. Most notably, this is a reduction of free-form text requirements and establishing a very "bare bones" approach. The following are the fields REQUIRED: 1. Title (UI accessible) 2. Product (Defaults to "ebuild" on generation of XML) 3. Announced (auto-generated) 4. Revised (auto-generated) 5. Affected (UI accessible) 6. References (UI accessible) 7. metadata (auto-generated) The following are OPTIONAL fields that the team will require available in the UI: 1. Bug (same as now) 2. Background (auto-populate from p.g.o) 3. Impact ("low", "normal", "critical") 4. Resolution (auto-generate as it is now)