On Mon, Feb 15, 2021 at 03:35:05PM +1100, Ian Wienand wrote:
> For future reference, security issues can be reported via the
> service-incident@opendev.org address.

Sorry, my typo: that should be service-incident@lists.opendev.org
(note the lists :)

-i