Re: [Docutils-develop] Private Sourceforge bugs are posted to docutils-develop

[Guenter M. <mi...@us...>]

Dear Florian,

On 2026-07-27, Florian Weimer via Docutils-develop wrote:
> I've noticed that private bugs are announced on this list, making the
> private checkbox in the Sourceforge bug tracker ineffictive.

Thank you for pointing this out. 
Sorry for the delay, I was on summer holidays in the great outdoors.

I changed the settings to "Send notifications for: All public ticket
changes", so this should no longer be an issue. 

Instead, there is a real chance that the issue is overlooked as I usually
just check the lists.

> Is there are more reliable way to report security
> issues privately?

You can email the developers directly, preferably the one(s) listed in 
copyright notice of the affected module file (however, some developers
are no longer active). 


That said, I was able to read your private bug report and will respond there.

Günter