<div dir="auto"><div style="padding-bottom:0px;border-bottom:0px" dir="auto"><p style="margin:1em 0px">Correct. From the bottom of the blog post:</p><p style="margin:1em 0px">This issue was publicly reported through a GitHub pull request, therefore we fixed the issue as soon as possible without the usual <a href="https://docs.djangoproject.com/en/dev/internals/security/#how-django-discloses-security-issues" rel="noreferrer noreferrer" target="_blank">prenotification process</a>.</p></div><a href="https://www.djangoproject.com/weblog/2019/jan/04/security-releases/#top" style="display:block;margin:10px 0px;padding:10px 0px" rel="noreferrer noreferrer" target="_blank"><span style="display:inline-block;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;line-height:1"></span></a><br></div><br><div class="gmail_quote"><div dir="ltr">On Fri, Jan 4, 2019, 12:14 PM Chris Lamb <<a href="mailto:lamby@debian.org" rel="noreferrer noreferrer" target="_blank">lamby@debian.org</a> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi Tim,<br>
<br>
I just noticed:<br>
<br>
  <a href="https://www.djangoproject.com/weblog/2019/jan/04/security-releases/" rel="noreferrer noreferrer noreferrer noreferrer" target="_blank">https://www.djangoproject.com/weblog/2019/jan/04/security-releases/</a><br>
<br>
… in my RSS reader. Was this sent to the Django security "pre-<br>
announce" list? :)<br>
<br>
If yes, I appear to have been dropped from that list and, if not,<br>
then I would be curious why!<br>
<br>
<br>
Regards,<br>
<br>
-- <br>
      ,''`.<br>
     : :'  :     Chris Lamb<br>
     `. `'`      <a href="mailto:lamby@debian.org" rel="noreferrer noreferrer noreferrer" target="_blank">lamby@debian.org</a> / <a href="http://chris-lamb.co.uk" rel="noreferrer noreferrer noreferrer noreferrer" target="_blank">chris-lamb.co.uk</a><br>
       `-<br>
</blockquote></div>