Re: [Geoserver-devel] Security considerations for 2.24.0 and 2.23.2

2023-10-23 Thread Jody Garnett
Von:* Jody Garnett > *Gesendet:* Samstag, 21. Oktober 2023 08:48 > *An:* Watermeyer, Andreas > *Cc:* geoserver-devel@lists.sourceforge.net > *Betreff:* Re: [Geoserver-devel] Security considerations for 2.24.0 and > 2.23.2 > > > > [Externe E-Mail] Vorsicht beim Öffnen von Links und A

Re: [Geoserver-devel] Security considerations for 2.24.0 and 2.23.2

2023-10-22 Thread Watermeyer, Andreas
care! Best regards, Andreas Watermeyer Von: Jody Garnett Gesendet: Samstag, 21. Oktober 2023 08:48 An: Watermeyer, Andreas Cc: geoserver-devel@lists.sourceforge.net Betreff: Re: [Geoserver-devel] Security considerations for 2.24.0 and 2.23.2 [Externe E-Mail] Vorsicht beim Öffnen von Links und

Re: [Geoserver-devel] Security considerations for 2.24.0 and 2.23.2

2023-10-20 Thread Jody Garnett
Hello, We have been updating our security policy, as we figure out how to inform folks of security vulnerabilities. It is hard to encourage people to update, without being in a position to tell why (yet). Please see GSIP-220 for the proposal: https://github.com/geoserver/geoserver/wiki/GSIP-220

[Geoserver-devel] Security considerations for 2.24.0 and 2.23.2

2023-10-20 Thread Watermeyer, Andreas
Hello community, 1) reviewing the GeoServer security policy I found the approach of a "Coordinated vulnerability disclosure" very reasonable. Thanks for taking security seriously. Regarding: 4. A fix is included for the "stable" and "maintenance" downloads [...] Does that mean, that Ge