1
0
mirror of synced 2026-01-08 12:01:53 -05:00

Merge pull request #27460 from github/repo-sync

Repo sync
This commit is contained in:
docs-bot
2023-08-14 16:00:27 -05:00
committed by GitHub
2 changed files with 12 additions and 0 deletions

View File

@@ -754,6 +754,12 @@ A release note for a security fix answers the following questions.
- > **MEDIUM**: An attacker could embed dangerous links in the instance's web UI because pull request preview links did not properly sanitize URLs. This vulnerability was reported via the [{% data variables.product.company_short %} Bug Bounty program](https://bounty.github.com).
#### Base image and package updates
We also include base image and dependent package updates in the "Security fixes" section, since these updates often address security issues. We consolidate all of these updates in the following note.
> Packages have been updated to the latest security versions.
### Bug fixes
A release note for a bug fix describes a correction to an undesired or otherwise unexpected behavior. Generally, notes for bug fixes are only part of patch releases.

View File

@@ -693,6 +693,12 @@ A release note for a security fix answers the following questions.
- > **MEDIUM**: An attacker could embed dangerous links in the instance's web UI because pull request preview links did not properly sanitize URLs. This vulnerability was reported via the [GitHub Bug Bounty program](https://bounty.github.com).
#### Base image and package updates
We also include base image and dependent package updates in the "Security fixes" section, since these updates often address security issues. We consolidate all of these updates in the following note.
> Packages have been updated to the latest security versions.
### Bug fixes
A release note for a bug fix describes a correction to an undesired or otherwise unexpected behavior. Generally, notes for bug fixes are only part of patch releases.