[QGIS-Developer] Reporting security related issues ?

[Richard Duivenvoorde]

On 13/02/2020 09.38, Matthias Kuhn wrote:

> Maybe others are better than me in remembering such workflows, but I
> will forget that for sure.

Which 'workflow'?

- somebody finds an issue, and sents an email to security at qgis.org
- everybody in the mail group sees this and can respond (cc to
security at qgis.org)
- somebody picks this up

No other services needed?

Regards,

Richard