View Issue Details

IDProjectCategoryView StatusLast Update
0026116mantisbtwebpagepublic2019-09-16 15:16
Reporterj_schultz Assigned To 
PrioritynormalSeverityminorReproducibilityN/A
Status newResolutionopen 
Summary0026116: mantisbt-announce not updated anymore
Description

mantisbt-announce hasn't been updated in over 5 years, the last time was when there was a rather severe SQL vulnerability. Still, there have been less severe CVEs in the meantime but it seems like the mailing list is dead.

What is the recommended way of automatically being notified of new Mantis security releases? (Twitter is not a suitable replacement for reacting to potentially security-critical issues.)

TagsNo tags attached.

Activities

dregad

dregad

2019-09-06 02:44

developer   ~0062735

@vboctor this was your decision so I'll let you respond.

j_schultz

j_schultz

2019-09-16 15:16

reporter   ~0062826

I should add that I'm fine with using https://www.mantisbt.org/blog/?feed=rss2 which I just found - but abandoning an announcement / security mailing list without any explanation where to go instead is a bad move.

Issue History

Date Modified Username Field Change
2019-09-05 14:48 j_schultz New Issue
2019-09-06 02:44 dregad Note Added: 0062735
2019-09-16 15:16 j_schultz Note Added: 0062826