[postgis-devel] PSC Vote add a security at postgis.net

[Regina Obe]

Angelos,

 

Thanks.  I just put in a subscription request.  I guess it requires manual
approval since haven't gotten a response yet.

 

Thanks,

Regina

 

From: postgis-devel [mailto:postgis-devel-bounces at lists.osgeo.org] On Behalf
Of Angelos Tzotsos
Sent: Saturday, December 7, 2019 11:25 AM
To: PostGIS Development Discussion <postgis-devel at lists.osgeo.org>
Subject: Re: [postgis-devel] PSC Vote add a security at postgis.net

 

Hi,

FYI there is security-priv at lists.osgeo.org
<mailto:security-priv at lists.osgeo.org>  where several CVE reports have been
logged.

On 12/5/19 8:34 PM, Regina Obe wrote:

Right now when any one has a security issue of a private nature they either
don't know who to send the notice to or send it to whoever they know on the
PSC.
 
 
 
I propose we have a security at postgis.net <mailto:security at postgis.net>
<mailto:security at postgis.net> <mailto:security at postgis.net>
(similar to how other projects had one)
 
 
 
And state if anyone found a security vulnerability in PostGIS  they can send
to this email.
 
 
 
Thoughts?
 
Also who want to handle security issues - can be more than one of us.
 
 
 
Thanks,
 
Regina
 
 





_______________________________________________
postgis-devel mailing list
postgis-devel at lists.osgeo.org <mailto:postgis-devel at lists.osgeo.org> 
https://lists.osgeo.org/mailman/listinfo/postgis-devel






-- 
Angelos Tzotsos, PhD
Charter Member
Open Source Geospatial Foundation
http://users.ntua.gr/tzotsos
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/postgis-devel/attachments/20191207/958a6803/attachment-0001.html>