[development] Re: [support] Drupal 4.6.6/4.5.8 security releases

[Boris Mann]

On 13-Mar-06, at 3:33 PM, Karoly Negyesi wrote:

> On Tue, 14 Mar 2006 00:24:40 +0100, Alejandro Exojo <suy at kurly.org>  
> wrote:
>
>> El Martes, 14 de Marzo de 2006 01:03, Gerhard Killesreiter escribió:
>>> are now available. See drupal.org/node/53524
>>
>> I'm really very disappointed about how the Drupal project is  
>> handling releases
>> and security advisories. IMHO, it's the worst "big" free software  
>> project in
>> this regard.
>>
>
> Thanks for the appreciation of our hard work and your discreet  
> letter to them security team that the sending security newsletters  
> were forgotten. They were written just waited for sending.

Karoly: this is still a valid point. The security advisories *must*  
go out first, privately, before the public announcement. Do you need  
help with this next time? I'll volunteer to help manage this.

--
Boris Mann
Vancouver 778-896-2747 San Francisco 415-367-3595
SKYPE borismann
http://www.bryght.com