Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Subject: Re: [BUGS] BUG #2052: Federal Agency Tech Hub Refuses to Accept
Date: Fri, 25 Nov 2005 21:41:59 +0100
Message-ID: <6BCB9D8A16AC4241919521715F4D8BCE92E89E@algol.sollentuna.se>
Thread-Topic: [BUGS] BUG #2052: Federal Agency Tech Hub Refuses to Accept
thread-index: AcXyAEbS0CYqSsa8QVa2jCCps8DYzAAADZ6Q
From: "Magnus Hagander" <mha@sollentuna.net>
To: "Simon Riggs" <simon@2ndquadrant.com>, <pgsql-www@postgresql.org>
Cc: "Peter Eisentraut" <peter_e@gmx.net>, "Tom Lane" <tgl@sss.pgh.pa.us>,
	"Bruce Momjian" <pgman@candle.pha.pa.us>,
	"Stephen Frost" <sfrost@snowman.net>,
	"Ferindo Middleton" <fmiddleton@verizon.net>

> > > Unless somebody else wants to do this, I'll discuss on=20
> -www how we=20
> > > can get a page up on the .org site with this info on, so=20
> that we can=20
> > > be "CVE compatible".
> >=20
> > IMHO we should do that in any case, whether or not we=20
> mention CVEs in=20
> > our release notes or CVS logs in the future.  So go for it...
>=20
> Can I suggest a new web page at
> http://www.postgresql.org/support/security
> with links from the support page and a ShortCut from the home=20
> page, called "Security Information".
>=20
> The main page title could be Security Information, modelled=20
> where appropriate on http://www.us.debian.org/security/ but=20
> not too closely.

I'm working on this. Will let you know when I have something ready to
look at.
Though I have it at /docs/security for now (with an intended symlink
from /security). Perhaps support is better? (trivial to move before the
initial commit..)


> Not sure of the submission process/guidelines/format. Can=20
> someone send me the link to the FAQ, cos I can't find it on=20
> the main wwweb site.=20

Submission of security bugs, or of pages to the web? ;-)
Security bugs info is in the actual documentation pages under reporting
bugs.

//Magnus