On Sun, 30 Jan 2005, Tom Lane wrote:
Josh Berkus <josh@xxxxxxxxxxxx> writes:We don't really have an official security contact. The next best thing is to send such reports to pgsql-core, which is not an open list, but will reach a good chunk of those with an interest in fixing such problems.
Is there any reason not to set up a "security@xxxxxxxxxxxxxx" mail alias?
Probably not --- Marc, do you want to do that (and make it point to pgsql-core for now)?
I was just in the middle of adding notes to problems.sgml and bug.template to tell people to send security issues to pgsql-core, but I can make it say security@ instead.
Consider it done ...
---- Marc G. Fournier Hub.Org Networking Services (http://www.hub.org) Email: scrappy@xxxxxxx Yahoo!: yscrappy ICQ: 7615664
---------------------------(end of broadcast)--------------------------- TIP 5: Have you checked our extensive FAQ?
http://www.postgresql.org/docs/faq
