Difference between revisions of "Template: SecurityBoilerplate"

Revision as of 22:53, December 16, 2021

Select boilerplate text for various security-related issues or statements.

Template parameters
Parameter		Description	Type	Status
Boilerplate	`Boilerplate`	Select your boilerplate statement: NodeDescription = full statement on NodeJS, NodeHighlight = short summary for NodeJS, log4jHighlight = short summary for log4j, log4jShortDescr = short description for log4j, log4jFullDescr = full description for log4j Default empty Example empty Auto value empty	String	required

@@ Line 2: / Line 2: @@
 |NodeDescription=This release includes important security upgrades made to third-party software.
 |NodeHighlight=Important security improvements
+|log4jHighlight=Important security improvements.
+|log4jShortDescr=This release includes important security fixes related to the log4j vulnerability (CVE-2021-44228).
+|log4jFullDescr=This release includes important security fixes related to the log4j vulnerability (CVE-2021-44228). In particular, the log4j library included with {{#cargo_query:tables=ComponentRN,Component|join on=ComponentRN.ComponentId HOLDS Component.Id|fields=Component.Name|no html|where=ComponentRN._pageName="{{FULLPAGENAME}}"|group by=Component.Name}} has been upgraded to version 2.16.0.
 |#default=
 }}<noinclude>[[Category:RNAutomation]]<templatedata>
@@ Line 7: / Line 10: @@
 	"params": {
 		"Boilerplate": {
-			"description": "Select your boilerplate statement: NodeDescription = full statement on NodeJS, NodeHighlight = Short summary for NodeJS",
+			"description": "Select your boilerplate statement: NodeDescription = full statement on NodeJS, NodeHighlight = short summary for NodeJS, log4jHighlight = short summary for log4j, log4jShortDescr = short description for log4j, log4jFullDescr = full description for log4j",
 			"type": "string",
 			"required": true