Hello Richard,

I know everyone is quite busy, but I still figure that you, as
roundup's primary developer, probably get to hit on security problems
earlier than I do. Can you please alert me of any problems that you
encounter out of band (ie, not via the BTS, but via private email)? You
could probably have a reactor on bugs tagged 'security' that pings
me...

In any case I've been alerted to this problem via the BTS:

> http://issues.roundup-tracker.org/issue2550521

The proposed fix is a very ugly workaround...

I'd like to ensure that such problems don't linger in the BTS, but at
the same time avoid having to tour all (the various) trackers that I
could be affected by, on a daily basis, because that would effectively
bog me down quite a bit/probably too much.

In any case, I'm currently preparing an updated roundup package for
Debian, but I'm quite unaware about the process at your end.

Please tell me what you think.

Kind regards,
--Toni++