{"thread":{"id":"36454","subject":"security vulnerability disclosure procedure?","startedAt":"2014-04-20T20:42:09Z","lastAt":"2014-04-21T18:07:17Z","messageCount":2,"participants":["Richard Hansen","Shawn Pearce"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"239179","messageId":"53543121.3000808@bbn.com","threadId":"36454","inReplyTo":null,"subject":"security vulnerability disclosure procedure?","fromName":"Richard Hansen","fromEmail":"rhansen@bbn.com","sentAt":"2014-04-20T20:42:09Z","receivedAt":"2014-04-20T20:42:09Z","isPatch":false,"sender":{"key":"rhansen@rhansen.org","avatar":null},"body":"Hi all,\n\nI have discovered a minor security vulnerability.  I could send the\npatch to the mailing list, but I wanted someone else to take a look\nfirst just to make sure it's minor enough that folks will think it's OK\nto publicly announce.\n\nWho should I send the patch to?\n\nThanks,\nRichard\n"},{"id":"239212","messageId":"CAJo=hJsU7hLMwkvPMqM7J7Tj0svQzQwp8xXHRKr=Gp8W6j55dA@mail.gmail.com","threadId":"36454","inReplyTo":"53543121.3000808@bbn.com","subject":"Re: security vulnerability disclosure procedure?","fromName":"Shawn Pearce","fromEmail":"spearce@spearce.org","sentAt":"2014-04-21T18:07:17Z","receivedAt":"2014-04-21T18:07:17Z","isPatch":false,"sender":{"key":"spearce@spearce.org","avatar":"https://avatars.githubusercontent.com/u/34844?v=4"},"body":"On Sun, Apr 20, 2014 at 1:42 PM, Richard Hansen <rhansen@bbn.com> wrote:\n> I have discovered a minor security vulnerability.  I could send the\n> patch to the mailing list, but I wanted someone else to take a look\n> first just to make sure it's minor enough that folks will think it's OK\n> to publicly announce.\n>\n> Who should I send the patch to?\n\nPrevious issues were routed through the maintainer, Junio directly (CC'd).\n"}]}