On Thu, 21 Apr 2022 11:43:34 -0400 Thomas Ward <teward@ubuntu.com> wrote:
I am looking for a sponsor for my package "nginx": * Package name : nginx Version : 1.20.2-1 Upstream Author : Igor Sysoev * URL : https://nginx.org * License : BSD-4-clause, Expat, BSD-2-clause, BSD-3-clause * Vcs : https://salsa.debian.org/nginx-team/nginx Section : httpd
You should also mark CVE-2021-3618 as resolved with the changelog. When you are not on the uploaders list anymore, you should send the RFS to the team address instead (or their preferred channel for RFSs). I am also sending this to the bug where you asked for the new version. I hope one of the team's DDs will sponsor it in a reasonable timeframe.