Feature #44553
closed
Request to subscribe to the security mailing list
Description
I am the maintainer of the Debian Redmine package. Up until recently Jérémy Lal has also been helping to maintain the Redmine package, but he is going to be stepping back from that role. Jérémy was subscribed to the Redmine security mailing list and used to forward those emails to me. With him stepping back, would it be possible for me to be subscribed directly at soren@debian.org?
Updated by Holger Just about 1 month ago
Unfortunately, we don't have a special security mailing list, so there is nothing we could subscribe you to. You can subscribe to the news blog at https://www.redmine.org/projects/redmine/news for release announcements using your favorite Atom reader.
With that being said, we did privately notify the Debian project about a few important fixes before their eventual release, but that was already quite a while ago. If I remember correctly, this was facilitated via security@debian.org.
Updated by Jérémy Lal 4 days ago
I've been receiving [Security - Defect #nnnnn] emails for years now.
Typically
Author: Go MAEDA
Status: Closed
Priority: Normal
Assignee: Marius BĂLTEANU
Category: Security
Target version: 6.0.12
Resolution: Fixed
Affected version: 6.0.0
Severity: High
Updated by Jérémy Lal 4 days ago
Also, I vouch for Soren Stoutner taking over my role.
I've stopped maintaining redmine Debian package a long time ago.
It would be nice if Soren was able to receive the same emails as I currently do.
Updated by Holger Just 2 days ago
- Assignee set to Marius BĂLTEANU
My apologies, I did not realize that you (Jérémy Lal) had this access level.
Checking a bit further, Soren is indeed listed as an uploader for the Debian Redmine package at https://tracker.debian.org/pkg/redmine using the same email address as his Redmine user. As such, I think we could and should add Soren to the security team with the same permissions Jérémy has currently. Marius, could you make this possible?
Jérémy Lal: if you are no longer involved in Redmine maintenance on Debian's side, do you still require this privileged level of access? Or would it be acceptable to remove your user when we add Soren Stoutner? I don't want to push you or anything, it would be just for maintaining some permission hygiene.
Updated by Jérémy Lal 2 days ago
Holger Just wrote in #note-4:
Jérémy Lal: if you are no longer involved in Redmine maintenance on Debian's side, do you still require this privileged level of access? Or would it be acceptable to remove your user when we add Soren Stoutner? I don't want to push you or anything, it would be just for maintaining some permission hygiene.
Yes, I'm no longer involved. You can remove myself from this level of access.
Updated by Marius BĂLTEANU 1 day ago
- Status changed from New to Closed
- Resolution set to Fixed
I made the changes, thank you!