[Pkg-mediawiki-devel] [MediaWiki-distributors] Early (embargoed) disclosure of upcoming security releases

[Jonathan Wiltshire]

Hi,

On 2013-03-02 17:50, Chris Steipp wrote:
> I'm definitely open to working with debian to find a way to get you
> early access. We've guessed that was something some distributions
> would like, but I haven't worked with each distro to figure out their
> needs yet. Thanks for bringing the subject up.

I'd rather like to re-visit this. In the short term, would you be happy 
to disclose the forthcoming advisory and patches for 3rd September to 
our security team, with their GPG key, for them to disseminate as 
appropriate? At a minimum could you send on the proposed advisory text 
so we can do an assessment?

In the long run getting early access to patches would be really helpful 
for preparing packages we can release when embargoes are lifted.

Thanks,

-- 
Jonathan Wiltshire                                      jmw at debian.org
Debian Developer                         http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51