[wp-hackers] Security Releases Proposal

[Knut-Olav Hoven]

On Monday 11 June 2007 22:59:07 Peter Westwood wrote:
>[...]
> On Day x current version is 2.2.7 and exploit y is published then we
> should asap release 2.2.8 with a fix.
>
> However if the current version is 2.3 then the security fix should go
> into 2.3.1 - and probably any other non-security fixes that have already
> been made but have not had sufficient testing should be kept until 2.3.2

If we are near a release of 2.3 (some days ahead) or just released it (some 
days ago) when exploit "y" is found, we should also patch up the 2.2 release, 
not only fix the bug in 2.3 or 2.3.1.

>[...]


-- 
Knut-Olav Hoven
Systemutvikler               mob: +47 986 71 700
Linpro AS                    http://www.linpro.no/