This is an automated email from the ASF dual-hosted git repository. jleroux pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/ofbiz-site.git
The following commit(s) were added to refs/heads/master by this push: new 6456cf5 Improved: It seems 17.12.02 never existed 6456cf5 is described below commit 6456cf5ad497e53217901ea343aa12f3cf24fa4e Author: Jacques Le Roux <jacques.le.r...@les7arts.com> AuthorDate: Mon Jul 11 12:34:13 2022 +0200 Improved: It seems 17.12.02 never existed --- download.html | 52 +++++++++++++++++++----------------------- template/page/download.tpl.php | 24 ++++++++----------- 2 files changed, 34 insertions(+), 42 deletions(-) diff --git a/download.html b/download.html index ca15ded..25b34ef 100644 --- a/download.html +++ b/download.html @@ -82,7 +82,7 @@ </li> <li><a href="#" class="firstLevel">Community</a> <ul> - <li><a href="getting-involved.html">Getting Involved</a></li> + <li><a href="getting-involved.html">Getting Involved</a></li> <li><a href="mailing-lists.html">Mailing Lists</a></li> <li><a href="source-repositories.html">Source Repository</a></li> <li><a href="download.html">Downloads</a></li> @@ -91,18 +91,18 @@ </ul> </li> <li><a href="ofbiz-demos.html" class="firstLevel">Demos</a></li> - <li> - <a href="//twitter.com/ApacheOfbiz" class="icon-twitter-bird socialIcon tips" - target="external" title="follow us on Twitter"><span>twitter</span></a> - </li> - <li><a href="//www.linkedin.com/company/apache-ofbiz/" target="external" class="icon-linkedin socialIcon tips" title="follow us on Linkedin"><span>linkedin</span></a></li> - <li><a href="//www.facebook.com/Apache-OFBiz-1478219232210477/?ref=page_internal" target="external" class="icon-facebook socialIcon tips" title="follow us on Facebook"><span>facebook</span></a></li> - <li><a href="//www.youtube.com/user/ofbiz" class="icon-play socialIcon tips" target="external" title="follow us on Youtube"><span>Youtube</span></a></li> - <!--<li><a href="#" class="icon-rss socialIcon tips" title="Our rss feed"><span>rss feed</span></a></li> - <li><a href="#" class="icon-gplus socialIcon tips" title="follow us on Google +"><span>google +</span></a></li> - <li><a href="#" class="icon-instagram socialIcon tips" title="follow us on Instagram"><span>instagram</span></a></li> - <li><a href="#" class="icon-linkedin socialIcon tips" title="follow us on Linkedin"><span>linkedin</span></a></li> - <li><a href="#" class="icon-pinterest-circled socialIcon tips" title="follow us on Pinterest"><span>Pinterest</span></a></li>--> + <li> + <a href="//twitter.com/ApacheOfbiz" class="icon-twitter-bird socialIcon tips" + target="external" title="follow us on Twitter"><span>twitter</span></a> + </li> + <li><a href="//www.linkedin.com/company/apache-ofbiz/" target="external" class="icon-linkedin socialIcon tips" title="follow us on Linkedin"><span>linkedin</span></a></li> + <li><a href="//www.facebook.com/Apache-OFBiz-1478219232210477/?ref=page_internal" target="external" class="icon-facebook socialIcon tips" title="follow us on Facebook"><span>facebook</span></a></li> + <li><a href="//www.youtube.com/user/ofbiz" class="icon-play socialIcon tips" target="external" title="follow us on Youtube"><span>Youtube</span></a></li> + <!--<li><a href="#" class="icon-rss socialIcon tips" title="Our rss feed"><span>rss feed</span></a></li> + <li><a href="#" class="icon-gplus socialIcon tips" title="follow us on Google +"><span>google +</span></a></li> + <li><a href="#" class="icon-instagram socialIcon tips" title="follow us on Instagram"><span>instagram</span></a></li> + <li><a href="#" class="icon-linkedin socialIcon tips" title="follow us on Linkedin"><span>linkedin</span></a></li> + <li><a href="#" class="icon-pinterest-circled socialIcon tips" title="follow us on Pinterest"><span>Pinterest</span></a></li>--> </ul> </nav> </div> @@ -129,7 +129,7 @@ <div class="row"> <!-- sidebar --> <aside class="span4" id="sidebar"> - + <section class="widget blogUpdates"> <h2>Releases for Download</h2> <div class="divider"><span></span></div> @@ -196,10 +196,6 @@ <h2>OFBiz 17.12.03</h2> <a href="release-notes-17.12.03.html" class="moreLink">→ View</a> </li> - <li> - <h2>OFBiz 17.12.02</h2> - <a href="release-notes-17.12.02.html" class="moreLink">→ View</a> - </li> <li> <h2>OFBiz 17.12.01</h2> <a href="release-notes-17.12.01.html" class="moreLink">→ View</a> @@ -259,7 +255,7 @@ <div class="divider"><span></span></div> <div class="imgWrapper"> <img src="images/Download.jpg" alt="image fullwidth"> </div> <p> <strong> Use the links below to download Apache OFBiz releases from the "Apache Download Mirrors" page. The download page also includes instructions on how to verify the integrity of the release file using the signature and hash (PGP, SHA512) available for each release. If you need more information about why and how to verify the integrity of the release file <a href="http://www.apache.org/info/verification.html" class="moreLink">this → page is what you look for</a>< [...] - + <p> <strong> Then, to install OFBiz, follow the explanations in the "INSTALL" file found in the just downloaded/extracted OFBiz main directory.</strong> </p> <p> <strong>PLEASE NOTE:</strong> Despite our best efforts to maintain up to three active release branches, support for older branches can decrease because our project volunteers may be focused on other issues. We recommend using releases from the most recent branch wherever possible. </p> @@ -279,18 +275,18 @@ available <a href="security.html">here</a></p> <p><strong>We strongly encourage OfBiz users to report security problems affecting OFBiz to the private security mailing lists (either secur...@ofbiz.apache.org or secur...@apache.org), before disclosing them in a public forum. Please don't pack several vulnerabilities in the same report, send them one by one, thanks in advance.</strong></p> - - - <p>Note that we no longer create CVEs for post-auth attacks done using demo credentials, notably using the admin user. + + + <p>Note that we no longer create CVEs for post-auth attacks done using demo credentials, notably using the admin user. <strong> <a href="https://s.apache.org/dsj2p"> Rather create bugs reports in our issue tracker (Jira) for that.</a><span style="color:red"> Please don't create Jira issues for unauth (aka pre-auth) reports, thanks in advance.</span></strong></p> - - - <p>One of the reason we no longer create CVEs for post-auth attacks done using demo credentials is because + + + <p>One of the reason we no longer create CVEs for post-auth attacks done using demo credentials is because <a href="https://nightlies.apache.org/ofbiz/trunk/readme/html5/#security" target="external"> we highly suggest to OFBiz users to not use credentials demo in production</a> and we expect OFBiz users to do so. - <a href="https://cwiki.apache.org/confluence/display/OFBIZ/Keeping+OFBiz+secure" target="external"> We also warn our users on the "Keeping OFBiz secure wiki page".</a> + <a href="https://cwiki.apache.org/confluence/display/OFBIZ/Keeping+OFBiz+secure" target="external"> We also warn our users on the "Keeping OFBiz secure wiki page".</a> And finally, mostly we reject post-auth vulnerabilities because we have a solid CSRF defense.</p> - + <h2>Earlier Releases</h2> <div class="divider"><span></span></div> @@ -357,7 +353,7 @@ available <a href="security.html">here</a></p> <li><a href="https://privacy.apache.org/policies/privacy-policy-public.html" target="external">Privacy Policy</a></li> <li><a href="https://www.apache.org/events/current-event" target="external">Events</a></li> <li><a href="https://www.apache.org/foundation/sponsorship.html" target="external">Sponsorship</a> - and <a href="https://www.apache.org/foundation/contributing.html" target="external">Donations</a> + and <a href="https://www.apache.org/foundation/contributing.html" target="external">Donations</a> </li> <li><a href="https://www.apache.org/foundation/thanks.html" target="external">Thanks</a></li> <li><a href="https://ofbiz.apache.org/security.html">Security</a></li> diff --git a/template/page/download.tpl.php b/template/page/download.tpl.php index e691b8e..52071ef 100644 --- a/template/page/download.tpl.php +++ b/template/page/download.tpl.php @@ -18,7 +18,7 @@ <div class="row"> <!-- sidebar --> <aside class="span4" id="sidebar"> - + <section class="widget blogUpdates"> <h2>Releases for Download</h2> <div class="divider"><span></span></div> @@ -113,10 +113,6 @@ <h2>OFBiz 16.11.03</h2> <a href="release-notes-16.11.03.html" class="moreLink">→ View</a> </li> - <li> - <h2>OFBiz 16.11.02</h2> - <a href="release-notes-16.11.02.html" class="moreLink">→ View</a> - </li> <li> <h2>OFBiz 16.11.01</h2> <a href="release-notes-16.11.01.html" class="moreLink">→ View</a> @@ -148,7 +144,7 @@ <div class="divider"><span></span></div> <div class="imgWrapper"> <img src="images/Download.jpg" alt="image fullwidth"> </div> <p> <strong> Use the links below to download Apache OFBiz releases from the "Apache Download Mirrors" page. The download page also includes instructions on how to verify the integrity of the release file using the signature and hash (PGP, SHA512) available for each release. If you need more information about why and how to verify the integrity of the release file <a href="http://www.apache.org/info/verification.html" class="moreLink">this → page is what you look for</a>< [...] - + <p> <strong> Then, to install OFBiz, follow the explanations in the "INSTALL" file found in the just downloaded/extracted OFBiz main directory.</strong> </p> <p> <strong>PLEASE NOTE:</strong> Despite our best efforts to maintain up to three active release branches, support for older branches can decrease because our project volunteers may be focused on other issues. We recommend using releases from the most recent branch wherever possible. </p> @@ -168,18 +164,18 @@ available <a href="security.html">here</a></p> <p><strong>We strongly encourage OfBiz users to report security problems affecting OFBiz to the private security mailing lists (either secur...@ofbiz.apache.org or secur...@apache.org), before disclosing them in a public forum. Please don't pack several vulnerabilities in the same report, send them one by one, thanks in advance.</strong></p> - - - <p>Note that we no longer create CVEs for post-auth attacks done using demo credentials, notably using the admin user. + + + <p>Note that we no longer create CVEs for post-auth attacks done using demo credentials, notably using the admin user. <strong> <a href="https://s.apache.org/dsj2p"> Rather create bugs reports in our issue tracker (Jira) for that.</a><span style="color:red"> Please don't create Jira issues for unauth (aka pre-auth) reports, thanks in advance.</span></strong></p> - - - <p>One of the reason we no longer create CVEs for post-auth attacks done using demo credentials is because + + + <p>One of the reason we no longer create CVEs for post-auth attacks done using demo credentials is because <a href="https://nightlies.apache.org/ofbiz/trunk/readme/html5/#security" target="external"> we highly suggest to OFBiz users to not use credentials demo in production</a> and we expect OFBiz users to do so. - <a href="https://cwiki.apache.org/confluence/display/OFBIZ/Keeping+OFBiz+secure" target="external"> We also warn our users on the "Keeping OFBiz secure wiki page".</a> + <a href="https://cwiki.apache.org/confluence/display/OFBIZ/Keeping+OFBiz+secure" target="external"> We also warn our users on the "Keeping OFBiz secure wiki page".</a> And finally, mostly we reject post-auth vulnerabilities because we have a solid CSRF defense.</p> - + <h2>Earlier Releases</h2> <div class="divider"><span></span></div>