On Mon, Sep 18, 2006 at 07:00:02PM -0700, Fred Cox wrote: > www/dotproject is still 2.0.2, even though 2.0.4 came > out in June to address an XSS vulnerability. See > http://www.dotproject.net/ for details. > > I've sent mail to the maintainer and the contact for > portaudit, with no response in over 2 weeks and 1 week > respectively. Portaudit does not report any problem > with dotproject. > > What's the next step?
If you submit the update as a PR, it can be committed under maintainer timeout. Kris
pgpa3aGzhQSr8.pgp
Description: PGP signature
