com web/bugs: Email security reports to distribution's security contacts: include/functions.php
| From: | Rasmus Lerdorf | Date: | Thu, 13 Sep 2012 17:05:17 +0000 |
| Subject: | com web/bugs: Email security reports to distribution's security contacts: include/functions.php | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-16877@lists.php.net to get a copy of this message | ||
Commit: 6d41525e499c36c93dc3f3599c2f5bb2ce904835
Author: Raphael Geissert <geissert@php.net> Thu, 13 Sep 2012 12:05:17 -0500
Parents: 8e52b180c27219dea17561db974507f3968e7121
Branches: master
Link: http://git.php.net/?p=web/bugs.git;a=commitdiff;h=6d41525e499c36c93dc3f3599c2f5bb2ce904835
Log:
Email security reports to distribution's security contacts
Only php.net's security team was receiving security reports, making
them go unnoticed to the distribution contacts.
This patch assumes that people in the $security_developers array (other
than those in $security_distro_people) receive a copy from php.net's
security address exploder.
Changed paths:
M include/functions.php
Diff:
diff --git a/include/functions.php b/include/functions.php
index 48a2e34..7078bfd 100644
--- a/include/functions.php
+++ b/include/functions.php
@@ -1356,6 +1356,9 @@ function get_package_mail($package_name, $bug_id = false, $bug_type =
'Bug')
} else if ($bug_type == 'Security') {
// Security problems *always* go to the sec team
$to[] = $secBugEmail;
+ foreach ($security_distro_people as $user) {
+ $to[] = "${user}@php.net";
+ }
$params = '-f bounce-no-user@php.net';
}
else {