On Tue, Jun 30, 2015 at 1:38 PM, jan i <j...@apache.org> wrote: > On 30 June 2015 at 13:54, Simon Phipps <si...@webmink.com> wrote: > > > On Tue, Jun 30, 2015 at 12:51 PM, jan i <j...@apache.org> wrote: > > > > > Hi. > > > > > > It is again time to make a board report, you can find my proposal at > > > https://cwiki.apache.org/confluence/display/OOOUSERS/2015+July > > > > > > comments and changes are welcome. > > > > > > > Should the fact CVE-2015-1774 is still unresolved in the released version > > be mentioned? > > > It is kind of obvious, no new release so of course it is still unresolved. >
The previous Board report was issued just before the CVE was made public, and is thus not mentioned. Given it's been unresolved for four months, two public, shouldn't it be mentioned this time? Thanks, Simon
