Hi Scot and Markus, the Drupal security team has been recently switching to a distributed model of responding to incoming security issues.<br><br>If you don't get a response from <a href="mailto:security@drupal.org">security@drupal.org</a>, then escalate to the Drupal security list and escalate to me as well. Use my kieran at gmail dot com address. If you need to reach me call me at work at 978-296-5234<br>
<br>Mori and I are the security team coordinators and we work with the 35 members of the Drupal security team to address issues. <br><br>Cheers,<br>Kieran<br><br><br><br><div class="gmail_quote">2010/1/14 Scott Hadfield <span dir="ltr"><<a href="mailto:hadsie@gmail.com">hadsie@gmail.com</a>></span><br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">I'm pretty curious about this as well... I submitted a couple issues about some contrib modules almost 6 months ago and never heard back. They
weren't that critical so I never followed up, but I have no idea if the mails
were even received or if they were just ignored.<br><font color="#888888"><br>- Scott</font><div><div></div><div class="h5"><br><br>On Thu, Jan 14, 2010 at 2:33 PM, Markus Kalkbrenner <span dir="ltr"><<a href="mailto:markus.kalkbrenner@arcor.de" target="_blank">markus.kalkbrenner@arcor.de</a>></span> wrote:<br>
<div class="gmail_quote"><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Hi!<br>
<br>
We discovered a critical security issue in Drupal 6 Core and wrote a mail<br>
about it to <a href="mailto:security@drupal.org" target="_blank">security@drupal.org</a> more than two weeks ago. (2009-12-27)<br>
<br>
The only reaction so far was an auto response mail from<br>
<a href="mailto:security-bounces@drupal.org" target="_blank">security-bounces@drupal.org</a> the next day telling<br>
"All e-mails sent to us are read by a member of the team and acted upon if<br>
necessary."<br>
<br>
Now I'm not sure how to continue. Does it take more than two weeks to read<br>
through the mails and I just have to wait or is my message lost?<br>
<br>
Markus<br>
<br>
mkalkbrenner<br>
<a href="http://drupal.org/user/124705" target="_blank">http://drupal.org/user/124705</a><br>
</blockquote></div><br>
</div></div></blockquote></div><br>