[Mailman-Developers] Handling potential security bugs

[Florian Weimer]

Hi,

where should I submit security bugs?  There are two more in my queue
(minor ones, admittedly, as no server-side code execution is
involved).

Shall I post them to this mailing list, and notify full-disclosure &c
at the same time?  (Terri will prove that these two bugs are
non-issues as well, and propose to defer fixing them to 3.0 anyway, so
I doubt that I private discussion would get us anywhere.)

Florian