The Security Advisory Application 2.3.0 has been released.
This release brings the following changes:
- Disclosed advisories are now published automatically: marking an advisory as disclosed copies it to a public space, configurable in the administration, and the original page redirects to it
- Each advisory now has an assignee: advisories created in the wiki are assigned to their creator, and imported GitHub advisories to the XWiki user mapped to one of their GitHub users, the mapping being managed in a new "GitHub users mapping" administration section
- The list of advisories is now a Live Data table, showing only the disclosed advisories by default, with a CVE column and a filter on the patched versions
- Fixes the import of a GitHub advisory that failed with a NullPointerException when a vulnerable version range has no patched version
- Upgrades to the Release Notes Application 2.3