clear statement on CVE-2023-42118

[exim-website.git] / templates / static / doc / security / CVE-2019-10149.txt

diff --git a/templates/static/doc/security/CVE-2019-10149.txt b/templates/static/doc/security/CVE-2019-10149.txt
index b5ac66cee3ebc960990b2991e7109eec3e71cb39..6710d8d45ae0c8e3b403fbddb3618f5e450899ed 100644 (file)
--- a/templates/static/doc/security/CVE-2019-10149.txt
+++ b/templates/static/doc/security/CVE-2019-10149.txt
@@ -25,6 +25,8 @@ Next steps:
 t0    is expected to be 2019-06-04, 10:00 UTC
 t0+7d is expected to be 2019-06-11, 10:00 UTC
 
+UPDATE: Details leaked, CRD is re-scheduled to 2019-06-05 15:15 UTC.
+
 
 Timeline
 --------
@@ -32,5 +34,7 @@ Timeline
 * 2019-05-27 Report from Qualys to exim-security list
 * 2019-05-27 Patch provided by Jeremy Harris
 * 2019-05-29 CVE-2019-10149 assigned from Qualys via RedHat
-* 2019-06-03 This announcement
-* 2019-06-04 12:00 Grant restricted access to the non-public Git repo.
+* 2019-06-03 This announcement to exim-users, oss-security
+* 2019-06-04 10:00 UTC Grant restricted access to the non-public Git repo.
+* 2019-06-04 This announcement to exim-maintainers, exim-announce, distros
+* 2019-06-05 15:15 UTC Release the fix to the public