Update Announcement Format discussion
Bernd Bartmann
Bernd.Bartmann at sohanet.de
Sat Jan 10 23:53:07 UTC 2004
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Jesse Keating schrieb:
| Here is what I have as an example layout:
|
| Subject: [FLSA-2004:${bugzillaID}] Updated sendmail resolves security
| vulnerability
Some thoughts:
What's the difference between "Issue Date" and "Updated on"? If another
update becomes nescessary it should get a new Bugzilla entry.
Cross references should also include links to the upstream, CVE, CERT,
Bugtraq, Full-Disclosure, ... announcements
If a service like sshd or httpd gets an update and the post-install
scripts don't restart the service automatically a note should be added
how to restart the service manually.
The MD5SUMS and file sizes of the rpms HAVE TO BE listed.
The rpm changelog should be listed.
Best regards.
- --
Dipl.-Ing. (FH) Bernd Bartmann <Bernd.Bartmann at sohanet.de>
I.S. Security and Network Engineer
SoHaNet Technology GmbH / Kaiserin-Augusta-Allee 10-11 / 10553 Berlin
Fon: +49 30 214783-44 / Fax: +49 30 214783-46
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFAAJBjkQuIaHu84cIRAgazAKCUVCXQTnp+84DGsg2kxwd0ZsWcegCfaWDR
Y9ApUqvfjil5vIyacft7Ihs=
=Gtze
-----END PGP SIGNATURE-----
More information about the fedora-legacy-list
mailing list