1<article>
2 <h3 style="color:#555;font-weight:normal;text-transform:uppercase;">Date</h3>
3
4 <p>${.vars['reserved-article-display-date'].data}</p>
5
6 <h3 style="color:#555;font-weight:normal;text-transform:uppercase;">Title</h3>
7
8 <p>${.vars['reserved-article-title'].data}</p>
9
10 <h3 style="color:#555;font-weight:normal;text-transform:uppercase;">Description</h3>
11
12 <p>${description.getData()}</p>
13
14 <h3 style="color:#555;font-weight:normal;text-transform:uppercase;">Severity</h3>
15
16 <p>${severity.getData()}</p>
17
18 <#if workaround.getData()?has_content>
19 <h3 style="color:#555;font-weight:normal;text-transform:uppercase;">Workaround</h3>
20 <p>${workaround.getData()}</p>
21 </#if>
22
23 <#if issuelink.getData()?has_content>
24 <h3 style="color:#555;font-weight:normal;text-transform:uppercase;">Issue Links</h3>
25
26 <p><em>Note that some or all of these may not yet be accessible. The CST remains committed to full disclosure of all
27 security issues once fully resolved.</em></p>
28
29 <ul>
30 <li><a href="http://issues.liferay.com/browse/$issuelink.data">${issuelink.getData()}</a></li>
31 </ul>
32 </#if>
33
34 <#if binarypatchlink.getData()?has_content>
35
36 <h3 style="color:#555;font-weight:normal;text-transform:uppercase;">Binary Patch</h3>
37
38 <p>See the Community Security Team <a href="/web/community-security-team/process#binary-patch">process page</a> for
39 details on working with binary patches. The list below <em>may</em> contain multiple links. If there are
40 multiple links, please check the notes section below for additional information. Please note that binary patches
41 only apply to the release with which this issue is associated. Applying a binary patch to any other release will
42 probably result in a broken install!</p>
43
44 <ul>
45 <#assign count = 1 />
46
47 <#list binarypatchlink.getSiblings() as cur_binarypatchlink>
48 <li><a href="${cur_binarypatchlink.getData()}">Binary Patch ${count}</a></li>
49
50 <#assign count = count + 1 />
51 </#list>
52 </ul>
53 </#if>
54
55 <#if sourcepatchlink.getData()?has_content>
56
57 <h3 style="color:#555;font-weight:normal;text-transform:uppercase;">Source Patch</h3>
58
59 <p>See the Community Security Team <a href="/web/community-security-team/process#source-patch">process page</a> for
60 details on working with source patches. Please note that source patches only apply to the release with which
61 this issue is associated. Applying a source patch to any other release will probably result in a broken install!
62 </p>
63
64 <ul>
65 <#list sourcepatchlink.getSiblings() as cur_sourcepatchlink>
66 <li><a href="${cur_sourcepatchlink.getData()}">Source Patch</a></li>
67 </#list>
68 </ul>
69
70 <p>For Github URLs suffixed with <code>.patch</code>, removing this suffix will yield a graphical view of the patch.
71 </p>
72 </#if>
73
74 <#if notes.getData()?has_content>
75 <h3 style="color:#555;font-weight:normal;text-transform:uppercase;">Notes</h3>
76
77 <p>${notes.getData()}</p>
78 </#if>
79
80 <#if credit.getData()?has_content>
81 <h3 style="color:#555;font-weight:normal;text-transform:uppercase;">Credit</h3>
82
83 <p>${credit.getData()}</p>
84 </#if>
85</article>