The
Liferay Community Security Team is an all-volunteer group of community members who manage security issues related to Liferay CE. When security-related issues arise in the open source Liferay project, the CST works to minimize the impact and provide relief to the community. In addition, the CST provides ongoing education to developers and users to keep their Liferay sites secure.
The main goal of the CST is to increase the security of Liferay technology. Specific goals include:
- Find and/or resolve security issues in Liferay CE
- Notify the community when new issues are resolved, and maintain a history of such known vulnerabilities
- Provide source and binary patches for security issues in the latest release of Liferay CE
- Work with the Liferay release teams during the CE Release cycle (e.g. during Beta release testing) to minimize or eliminate security issues before each new GA release
- Provide guidance and documentation to community developers to prevent introduction of security issues, or to resolve reported issues
This forum exists for discussions about the CST and its operations. All community members are welcome to post topics and hold discussions related to Liferay security. Individual Security Advisories (and associated discussions) are made in the Security Advisories subcategory.
Visit the
CST pages to learn more about this team and its goals and processes.
