[TYPO3] a thought about security announcements and automatic security alert

[Dmitry Dulepov [typo3]]

Krystian Szymukowicz wrote:
> What about:
> a) comma separated constrains of affected.
> a) comma separated constrains of exception.
> 
>  ext_key           affected versions        exceptions       bulletin
> sg_zfelib;(1.1.0-1.1.512),(2.0.0-2.2.982);(2.0.1-2.0.2);TYPO3-20080527-2

Well, this is where xml is really handy... I am not a fun of "xml for everything" (and not a fun of xml in general) but here it is better than text. For example:

<issue>
	<bulletine>TYPO3-20080527-2</bulletine>
	<extkey>sg_zfelib</extkey>
	<affected-versions>
		<version-range>
			<start>1.1.0</start>
			<end>1.1.512</start>
		</version-range>
		<version-range>
			<start>2.0.0</start>
			<end>2.2.982</start>
		</version-range>
		<version>3.0.1</version>
	</affected-versions>
</issue>

-- 
Dmitry Dulepov
TYPO3 core team
Web: http://typo3bloke.net/
"Nothing is impossible. There are only limits to our knowledge"