[edk2-wiki PATCH 0/3] Release Planning updates for edk2-stable201911

[edk2-wiki PATCH 0/3] Release Planning updates for edk2-stable201911

[Laszlo Ersek]

This short series fixes a typo in our release planning wiki page,
suggests a nicer format for referencing CVE numbers, and adds a link to
TianoCore#960.

Rendered view:

  https://github.com/lersek/edk2/wiki/EDK-II-Release-Planning

Cc: Liming Gao <liming.gao@intel.com>

Thanks,
Laszlo

Laszlo Ersek (3):
  Release Planning: fix typo in edk2-stable201911 tag name
  Release Planning: clean up CVE reference format
  Release Planning: reference BZ#960 (CVE-2019-14553) in
    edk2-stable201911

 EDK-II-Release-Planning.md | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

-- 
2.19.1.3.g30247aa5d201

[edk2-wiki PATCH 1/3] Release Planning: fix typo in edk2-stable201911 tag name

[Laszlo Ersek]

The next stable tag name should be "edk2-stable201911", not
"edk2-stable2019011".

Cc: Liming Gao <liming.gao@intel.com>
Signed-off-by: Laszlo Ersek <lersek@redhat.com>
---
 EDK-II-Release-Planning.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/EDK-II-Release-Planning.md b/EDK-II-Release-Planning.md
index 3cc92cadfe5a..e6148144cd91 100644
--- a/EDK-II-Release-Planning.md
+++ b/EDK-II-Release-Planning.md
@@ -1,4 +1,4 @@
-# edk2-stable2019011 tag planning
+# edk2-stable201911 tag planning
 
 ## Proposed Schedule
 
-- 
2.19.1.3.g30247aa5d201

[edk2-wiki PATCH 2/3] Release Planning: clean up CVE reference format

[Laszlo Ersek]

When referring to the titles of such TianoCore BZs that are CVEs, we
should use the following format:

  Subject (CVE-2019-...)

Because in the following format:

  (CVE-2019-...) - Subject

the CVE number is doubly separated from the subject (by parentheses, and
by dash).

Cc: Liming Gao <liming.gao@intel.com>
Signed-off-by: Laszlo Ersek <lersek@redhat.com>
---
 EDK-II-Release-Planning.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/EDK-II-Release-Planning.md b/EDK-II-Release-Planning.md
index e6148144cd91..177cbbebe18c 100644
--- a/EDK-II-Release-Planning.md
+++ b/EDK-II-Release-Planning.md
@@ -22,7 +22,7 @@
 * [Allow PCDs to be used in conditional statements if not referenced in an INF](https://bugzilla.tianocore.org/show_bug.cgi?id=2270)
 * [Add Support Laml and Lasa for TPM2 ACPI](https://bugzilla.tianocore.org/show_bug.cgi?id=978)
 * [Add PCI Device Security Support](https://bugzilla.tianocore.org/show_bug.cgi?id=2303)
-* [(CVE-2019-11098) - BootGuard TOCTOU vulnerability](https://bugzilla.tianocore.org/show_bug.cgi?id=1614)
+* [BootGuard TOCTOU vulnerability (CVE-2019-11098)](https://bugzilla.tianocore.org/show_bug.cgi?id=1614)
 * TBD
 
 # [edk2-stable201908 tag](https://github.com/tianocore/edk2/releases/tag/edk2-stable201908)
-- 
2.19.1.3.g30247aa5d201

[edk2-wiki PATCH 3/3] Release Planning: reference BZ#960 (CVE-2019-14553) in edk2-stable201911

[Laszlo Ersek]

The fix for ticket <https://bugzilla.tianocore.org/show_bug.cgi?id=960>
(CVE-2019-14553) will be released in edk2-stable201911. Reference the
ticket in the "Proposed Features" section.

Cc: Liming Gao <liming.gao@intel.com>
Signed-off-by: Laszlo Ersek <lersek@redhat.com>
---
 EDK-II-Release-Planning.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/EDK-II-Release-Planning.md b/EDK-II-Release-Planning.md
index 177cbbebe18c..961b63b0303a 100644
--- a/EDK-II-Release-Planning.md
+++ b/EDK-II-Release-Planning.md
@@ -23,6 +23,7 @@
 * [Add Support Laml and Lasa for TPM2 ACPI](https://bugzilla.tianocore.org/show_bug.cgi?id=978)
 * [Add PCI Device Security Support](https://bugzilla.tianocore.org/show_bug.cgi?id=2303)
 * [BootGuard TOCTOU vulnerability (CVE-2019-11098)](https://bugzilla.tianocore.org/show_bug.cgi?id=1614)
+* [Invalid server certificate accepted in HTTPS Boot (CVE-2019-14553)](https://bugzilla.tianocore.org/show_bug.cgi?id=960)
 * TBD
 
 # [edk2-stable201908 tag](https://github.com/tianocore/edk2/releases/tag/edk2-stable201908)
-- 
2.19.1.3.g30247aa5d201

Re: [edk2-wiki PATCH 0/3] Release Planning updates for edk2-stable201911

[Liming Gao]

Good catch. 

Reviewed-by: Liming Gao <liming.gao@intel.com>

>-----Original Message-----
>From: Laszlo Ersek [mailto:lersek@redhat.com]
>Sent: Tuesday, November 12, 2019 6:01 PM
>To: edk2-devel-groups-io <devel@edk2.groups.io>
>Cc: Gao, Liming <liming.gao@intel.com>
>Subject: [edk2-wiki PATCH 0/3] Release Planning updates for edk2-
>stable201911
>
>This short series fixes a typo in our release planning wiki page,
>suggests a nicer format for referencing CVE numbers, and adds a link to
>TianoCore#960.
>
>Rendered view:
>
>  https://github.com/lersek/edk2/wiki/EDK-II-Release-Planning
>
>Cc: Liming Gao <liming.gao@intel.com>
>
>Thanks,
>Laszlo
>
>Laszlo Ersek (3):
>  Release Planning: fix typo in edk2-stable201911 tag name
>  Release Planning: clean up CVE reference format
>  Release Planning: reference BZ#960 (CVE-2019-14553) in
>    edk2-stable201911
>
> EDK-II-Release-Planning.md | 5 +++--
> 1 file changed, 3 insertions(+), 2 deletions(-)
>
>--
>2.19.1.3.g30247aa5d201

Re: [edk2-wiki PATCH 0/3] Release Planning updates for edk2-stable201911

[Laszlo Ersek]

On 11/13/19 09:24, Gao, Liming wrote:
> Good catch. 
> 
> Reviewed-by: Liming Gao <liming.gao@intel.com>

Thanks!

Commit range 037b5adb5890..7ad574e68f9f.

Laszlo

>> -----Original Message-----
>> From: Laszlo Ersek [mailto:lersek@redhat.com]
>> Sent: Tuesday, November 12, 2019 6:01 PM
>> To: edk2-devel-groups-io <devel@edk2.groups.io>
>> Cc: Gao, Liming <liming.gao@intel.com>
>> Subject: [edk2-wiki PATCH 0/3] Release Planning updates for edk2-
>> stable201911
>>
>> This short series fixes a typo in our release planning wiki page,
>> suggests a nicer format for referencing CVE numbers, and adds a link to
>> TianoCore#960.
>>
>> Rendered view:
>>
>>  https://github.com/lersek/edk2/wiki/EDK-II-Release-Planning
>>
>> Cc: Liming Gao <liming.gao@intel.com>
>>
>> Thanks,
>> Laszlo
>>
>> Laszlo Ersek (3):
>>  Release Planning: fix typo in edk2-stable201911 tag name
>>  Release Planning: clean up CVE reference format
>>  Release Planning: reference BZ#960 (CVE-2019-14553) in
>>    edk2-stable201911
>>
>> EDK-II-Release-Planning.md | 5 +++--
>> 1 file changed, 3 insertions(+), 2 deletions(-)
>>
>> --
>> 2.19.1.3.g30247aa5d201
>