)]}'
{"doc/source/vmt-process.rst":[{"author":{"_account_id":14288,"name":"Matthew Thode","display_name":"prometheanfire","email":"mthode@mthode.org","username":"prometheanfire"},"change_message_id":"2d56bb563fe8b1efc7c1e6c75d44e16abb7a649a","unresolved":false,"context_lines":[{"line_number":51,"context_line":"of the VMT members, or as a StoryBoard or Launchpad security bug"},{"line_number":52,"context_line":"(check the box marked \"this is a security issue\")."},{"line_number":53,"context_line":""},{"line_number":54,"context_line":"The first steps performed by the VMT are to confirm the validity of"},{"line_number":55,"context_line":"the report, create a bug in StoryBoard or Launchpad if one does not"},{"line_number":56,"context_line":"yet exist, prefix the description with an `embargo reminder`_"},{"line_number":57,"context_line":"including an end date for its embargo, add an ossa bugtask and"},{"line_number":58,"context_line":"subscribe the project\u0027s core security review team for confirmation"},{"line_number":59,"context_line":"of impact and determination of affected branches. Reports starting"},{"line_number":60,"context_line":"with an *Incomplete* ossa bugtask should have a corresponding"},{"line_number":61,"context_line":"`incomplete reception`_ message added in a comment. Once the VMT"},{"line_number":62,"context_line":"confirms an OSSA is warranted, the ossa bugtask status will be set"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3fa7e38b_61fc91bc","line":59,"range":{"start_line":54,"start_character":0,"end_line":59,"end_character":50},"updated":"2020-02-17 18:36:58.000000000","message":"This is a list and better formatted as such.","commit_id":"92a5157e2ddf2d5dbf7a2f0576658fc3788a2416"},{"author":{"_account_id":14288,"name":"Matthew Thode","display_name":"prometheanfire","email":"mthode@mthode.org","username":"prometheanfire"},"change_message_id":"2d56bb563fe8b1efc7c1e6c75d44e16abb7a649a","unresolved":false,"context_lines":[{"line_number":200,"context_line":"Once the email is sent, the OSSA bugtask status should be set to"},{"line_number":201,"context_line":"*Fix committed* if the report uses Launchpad. At that point we can"},{"line_number":202,"context_line":"also add downstream stakeholders to the bug. This means adding"},{"line_number":203,"context_line":"~canonical-security to the bug subscribers in Launchpad, for"},{"line_number":204,"context_line":"example."},{"line_number":205,"context_line":""},{"line_number":206,"context_line":"For non-embargoed, public vulnerabilities no separate downstream"},{"line_number":207,"context_line":"advance notification is sent. Instead the OSSA bugtask is set to fix"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3fa7e38b_c1b30535","line":204,"range":{"start_line":203,"start_character":55,"end_line":204,"end_character":8},"updated":"2020-02-17 18:36:58.000000000","message":"Not sure the for example part is needed, also the section seems launchpad focused.","commit_id":"92a5157e2ddf2d5dbf7a2f0576658fc3788a2416"},{"author":{"_account_id":9311,"name":"Tristan Cacqueray","email":"tdecacqu@redhat.com","username":"tristanC"},"change_message_id":"106b8dbf439ec551976c02e24f78d688785f1953","unresolved":false,"context_lines":[{"line_number":414,"context_line":""},{"line_number":415,"context_line":"The NINETY_DAYS value should be 90 days from the date the report is"},{"line_number":416,"context_line":"accepted by the coordinator and project reviewers are subscribed. It"},{"line_number":417,"context_line":"can be trivially calculated with the ``date -I -d90days`` shell"},{"line_number":418,"context_line":"command."},{"line_number":419,"context_line":""},{"line_number":420,"context_line":"Impact description ($DESCRIPTION)"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3fa7e38b_01d11d5b","line":417,"range":{"start_line":417,"start_character":39,"end_line":417,"end_character":55},"updated":"2020-02-17 18:30:57.000000000","message":"that is useful!","commit_id":"92a5157e2ddf2d5dbf7a2f0576658fc3788a2416"}]}