     describing the issue and its resolution in detail, pointing to the
     relevant patches and new releases, and crediting the reporter of
     the issue (if the reporter wishes to be publicly identified).
  
  .. _the Python Package Index: http://pypi.python.org/pypi
  .. _the official Django development blog: https://www.djangoproject.com/weblog/
  .. _django-announce: http://groups.google.com/group/django-announce
  
  If a reported issue is believed to be particularly time-sensitive --
  due to a known exploit in the wild, for example -- the time between
 
</s> remove commonly-used keyservers. </s> add 
4. Post a notice to the `django-announce`_ mailing list that links to the blog
   post.

     describing the issue and its resolution in detail, pointing to the
     relevant patches and new releases, and crediting the reporter of
     the issue (if the reporter wishes to be publicly identified).
  
4. Post a notice to the `django-announce`_ mailing list that links to the blog
   post.

  .. _the Python Package Index: http://pypi.python.org/pypi
  .. _the official Django development blog: https://www.djangoproject.com/weblog/
  .. _django-announce: http://groups.google.com/group/django-announce
  
  If a reported issue is believed to be particularly time-sensitive --
  due to a known exploit in the wild, for example -- the time between
keep keep keep add keep keep keep keep keep keep
 Fixed #20868 -- Added an email to django-announce as a security step.

Thanks garrison for the report. 
docs/internals/security.txt