[postgis-devel] PSC Vote add a security at postgis.net

[Regina Obe]

Sensible issues.  We have unsensible issues? 

Private repo works for me -- hopefully we won't have too many.


-----Original Message-----
From: postgis-devel [mailto:postgis-devel-bounces at lists.osgeo.org] On Behalf Of Sandro Santilli
Sent: Friday, December 6, 2019 10:07 AM
To: PostGIS Development Discussion <postgis-devel at lists.osgeo.org>
Subject: Re: [postgis-devel] PSC Vote add a security at postgis.net

On Thu, Dec 05, 2019 at 01:34:56PM -0500, Regina Obe wrote:
> Right now when any one has a security issue of a private nature they 
> either don't know who to send the notice to or send it to whoever they 
> know on the PSC.
> 
> I propose we have a security at postgis.net <mailto:security at postgis.net> 
> (similar to how other projects had one)

+1

> Also who want to handle security issues - can be more than one of us.

I think it would be useful to have a private repository on Gitea to handle those issues. Whoever is on the list would take care of filing an issue there.

NOTE: Trac supports filing "sensible" issues, if the appropriate
      plugin is enabled. Gitea still doesn't, in a public repo
      ( feature request on https://github.com/go-gitea/gitea/issues/3217 )

--strk;
_______________________________________________
postgis-devel mailing list
postgis-devel at lists.osgeo.org
https://lists.osgeo.org/mailman/listinfo/postgis-devel