On Wed, Nov 27, 2024, 02:32 Kamil Dudka <kdu...@redhat.com> wrote: > On Wednesday, November 27, 2024 12:07:29 AM GMT+1 Michel Lind wrote: > > On Tue, Nov 26, 2024 at 12:11:27PM -0300, Marco Benatto wrote: > > > Hello all, > > > > > > We recently noticed there's a couple of PRs opened to fix > > > vulnerabilities in EPEL8 python-django3 with no response from the > > > maintainer (CC'ed). This is an important update as it fixes 4 > > > different CVEs. > > > > > > https://src.fedoraproject.org/rpms/python-django3/pull-request/2 > > > > > > I have raised a bugzilla bug asking for contact according > > > > https://docs.fedoraproject.org/en-US/fesco/Policy_for_nonresponsive_package_maintainers/ > > > > > > https://bugzilla.redhat.com/show_bug.cgi?id=2328973 > > > > > > may i please have your help in contacting the maintainer? > > > > > That PR was never in a state where it's merge-able, FYI > > Michel, I know you are busy but let's avoid using nonsense excuses like > this. >
What an intriguing way to treat packagers this is. I'll make sure to note this behavior for the future.
-- _______________________________________________ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
