On Sun, 30 Jan 2005, Tom Lane wrote:
> Josh Berkus <josh@agliodbs.com> writes:
>>> We don't really have an official security contact. The next best thing
>>> is to send such reports to pgsql-core, which is not an open list, but
>>> will reach a good chunk of those with an interest in fixing such
>>> problems.
>
>> Is there any reason not to set up a "security@postgresql.org" mail alias?
>
> Probably not --- Marc, do you want to do that (and make it point to
> pgsql-core for now)?
>
> I was just in the middle of adding notes to problems.sgml and
> bug.template to tell people to send security issues to pgsql-core,
> but I can make it say security@ instead.
Consider it done ...
----
Marc G. Fournier Hub.Org Networking Services (http://www.hub.org)
Email: scrappy@hub.org Yahoo!: yscrappy ICQ: 7615664