2008.09.03 08:14 "Re: [Tiff] Some security fixes from RHEL", by Andrey Kiselev

On Wed, Sep 03, 2008 at 01:19:44AM +0930, Ron wrote:

A list of people who should receive embargoed reports for comment seems like a useful thing to have instead of leaving individuals here as a single 'point of failure' when patches from security auditors need to be reviewed

Ron,

That is a good idea. I just added the following paragraph to our "Bugs" page:

"If you'd like to inform us about some kind of security issue that should not be disclosed for a period of time, then you can contact maintainers directly. Send a copies of your report to the following people: Frank Warmerdam <warmerdam@pobox.com>, Andrey Kiselev <dron@ak4719.spb.edu>."

Lee, feel free to add yourself to the list if you'd like.

Best regards,

Andrey

--
Andrey V. Kiselev
ICQ# 26871517