Re: Private Sourceforge bugs are posted to docutils-develop

Guenter Milde via Docutils-develop <[email protected]>
Newsgroups gmane.text.docutils.devel
Message-ID <[email protected]>
Dear Florian,

On 2026-07-27, Florian Weimer via Docutils-develop wrote:
> I've noticed that private bugs are announced on this list, making the
> private checkbox in the Sourceforge bug tracker ineffictive.

Thank you for pointing this out. 
Sorry for the delay, I was on summer holidays in the great outdoors.

I changed the settings to "Send notifications for: All public ticket
changes", so this should no longer be an issue. 

Instead, there is a real chance that the issue is overlooked as I usually
just check the lists.

> Is there are more reliable way to report security
> issues privately?

You can email the developers directly, preferably the one(s) listed in 
copyright notice of the affected module file (however, some developers
are no longer active). 


That said, I was able to read your private bug report and will respond there.

Günter



_______________________________________________
Docutils-develop mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/docutils-develop

Please use "Reply All" to reply to the list.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.