public inbox for [email protected]  

help / color / mirror / Atom feed

From: Bruce Momjian <[email protected]>
To: Alvaro Herrera <[email protected]>
Cc: Dave Page <[email protected]>
Cc: Tom Lane <[email protected]>
Cc: Lars Olson <[email protected]>
Cc: PostgreSQL www <[email protected]>
Subject: Submitting security bugs
Date: Thu, 8 May 2008 23:37:02 -0400 (EDT)
Message-ID: <[email protected]> (raw)
In-Reply-To: <[email protected]>

Alvaro Herrera wrote:
> Dave Page wrote:
> > On Mon, Mar 31, 2008 at 10:46 PM, Tom Lane <[email protected]> wrote:
> > >  If this were a security issue, you already spilled the beans by
> > >  reporting it to a public mailing list; so I'm unsure what you are
> > >  concerned about.
> > 
> > I'd wager that Lars didn't realise the bug form goes straight to the
> > list. We should probably make that more clear.
> > 
> > On the other hand it does say to report security issues to security@...
> 
> Let's have a checkbox "I am reporting a security issue" and send the
> mail to security@ if checked.

Do we want to do this?

-- 
  Bruce Momjian  <[email protected]>        http://momjian.us
  EnterpriseDB                             http://enterprisedb.com

  + If your life is a hard drive, Christ can be your backup. +

view thread (6+ messages)

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected], [email protected], [email protected], [email protected]
  Subject: Re: Submitting security bugs
  In-Reply-To: <[email protected]>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox