The 1.7.13 and 1.8.3 release announcements sent to annou...@apache.org were returned today with the message that the moderators failed to act on the posts.
Looking at the archives I see that my reply to fix the error in the CVE identifiers was moderated through but apparently the original messages were not. I'm not sure who's responsible for the list and what if anything we want to do about this.
