You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@juneau.apache.org by James Bognar <ja...@apache.org> on 2018/12/05 13:29:11 UTC

Security issue notifications

I see a discussion on the board about 1-year-old security bug
notifications being sent out to teams.  Does our team automatically
get notified of security bugs or is there some place we need to be
checking periodically?

Re: Security issue notifications

Posted by James Bognar <ja...@apache.org>.

Thanks Craig!
On Wed, Dec 5, 2018 at 10:53 AM Craig Russell <ap...@gmail.com> wrote:
>
> Security issues are sent by the security team to security@ project list if it exists, or private@ project list if security@ does not exist. Monitoring private@juneau.apache.org is all that the Juneau project needs to do.
>
> Craig
>
> > On Dec 5, 2018, at 5:29 AM, James Bognar <ja...@apache.org> wrote:
> >
> > I see a discussion on the board about 1-year-old security bug
> > notifications being sent out to teams.  Does our team automatically
> > get notified of security bugs or is there some place we need to be
> > checking periodically?
>
> Craig L Russell
> clr@apache.org
>

Re: Security issue notifications

Posted by Craig Russell <ap...@gmail.com>.

Security issues are sent by the security team to security@ project list if it exists, or private@ project list if security@ does not exist. Monitoring private@juneau.apache.org is all that the Juneau project needs to do.

Craig

> On Dec 5, 2018, at 5:29 AM, James Bognar <ja...@apache.org> wrote:
> 
> I see a discussion on the board about 1-year-old security bug
> notifications being sent out to teams.  Does our team automatically
> get notified of security bugs or is there some place we need to be
> checking periodically?

Craig L Russell
clr@apache.org