[Pkg-mediawiki-devel] [MediaWiki-distributors] Early (embargoed) disclosure of upcoming security releases

Chris Steipp csteipp at wikimedia.org
Wed Sep 4 04:29:13 UTC 2013


Hi Jonathan,

This last release was a little rushed, but I would like to make this happen
in the future. Greg and Mark (cc'ed) are figuring out our release process
right now, so hopefully we can work this in.

There were a few patches that didn't make it into this release, so we need
to get the next one out in the next couple of weeks. That may be a good
test run.


On Sun, Sep 1, 2013 at 9:21 AM, Jonathan Wiltshire <jmw at debian.org> wrote:

> Hi,
>
>
> On 2013-03-02 17:50, Chris Steipp wrote:
>
>> I'm definitely open to working with debian to find a way to get you
>> early access. We've guessed that was something some distributions
>> would like, but I haven't worked with each distro to figure out their
>> needs yet. Thanks for bringing the subject up.
>>
>
> I'd rather like to re-visit this. In the short term, would you be happy to
> disclose the forthcoming advisory and patches for 3rd September to our
> security team, with their GPG key, for them to disseminate as appropriate?
> At a minimum could you send on the proposed advisory text so we can do an
> assessment?
>
> In the long run getting early access to patches would be really helpful
> for preparing packages we can release when embargoes are lifted.
>
> Thanks,
>
> --
> Jonathan Wiltshire                                      jmw at debian.org
> Debian Developer                         http://people.debian.org/~jmw
>
> 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51
>
>
>
> ______________________________**_________________
> MediaWiki-distributors mailing list
> MediaWiki-distributors at lists.**wikimedia.org<MediaWiki-distributors at lists.wikimedia.org>
> https://lists.wikimedia.org/**mailman/listinfo/mediawiki-**distributors<https://lists.wikimedia.org/mailman/listinfo/mediawiki-distributors>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-mediawiki-devel/attachments/20130903/0afe5bb0/attachment.html>


More information about the Pkg-mediawiki-devel mailing list