Hello David,
On Thursday, 12 November 2015 8:35 PM, David Cafaro
<dac(a)cafaro.net> wrote:
https://bugzilla.redhat.com/buglist.cgi?bug_status=NEW&bug_status=ASS...
It shows a single bug BZ#1209214, right? It appears to be filed by a user
and then converted into a 'SecurityTracking' bug. Generally
'SecurityTracking'
bugs are created by automated tools which set both priority and severity to
be same.[*]
ex:->
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-2927
->
https://bugzilla.redhat.com/show_bug.cgi?id=1279691
[*]->
https://bugzilla.redhat.com/page.cgi?id=fields.html#priority
That have a severity rating of High, were being grouped under the
Unknown listing, since priority was unspecified.
Most likely user missed to set the priority.
I propose updating the links and any scripts to filter on Severity
and
not Priority as we are concerned with the security impact and not the
projects chosen priority for the fix.
Any issues with that?
I think above case is a one off. We need not change the query
on the FST page, but if we must, we could include both 'priorty'
and 'severity' field in the query.
---Regards
-P J P
http://feedmug.com