git/list[1] front-page[2] threads[3] people[4] search[5] about
 

[PATCH] git manpage: note git-security@googlegroups.com

From
Ævar Arnfjörð Bjarmason <avarab@gmail.com>
Date
Mar 8, 2018, 15:08 UTC
Message-ID
<20180308150820.22588-1-avarab@gmail.com>

Add a mention of the security mailing list to the "Reporting Bugs" section. There's a mention of this list at https://git-scm.com/community but none in git.git itself.

The copy is pasted from the git-scm.com website. Let's use the same wording in both places.

Signed-off-by: Ævar Arnfjörð Bjarmason <avarab@gmail.com>
---
Someone at Git Merge mentioned that our own docs have no mention of
how to report security issues. Perhaps this should be in
SubmittingPatches too, but I couldn't figure out how that magical
footnote format works.
 Documentation/git.txt | 3 +++
 1 file changed, 3 insertions(+)
diff --git a/Documentation/git.txt b/Documentation/git.txt
index 8163b5796b..4767860e72 100644
--- a/Documentation/git.txt
+++ b/Documentation/git.txt
@@ -849,6 +849,9 @@ Report bugs to the Git mailing list <git@vger.kernel.org> where the
 development and maintenance is primarily done.  You do not have to be
 subscribed to the list to send a message there.
 
+Issues which are security relevant should be disclosed privately to
+the Git Security mailing list <git-security@googlegroups.com>.
+
 SEE ALSO
 --------
 linkgit:gittutorial[7], linkgit:gittutorial-2[7],
-- 
2.15.1.424.g9478a66081
Next: Junio C Hamano
Message 1 of 2 in “git manpage: note git-security@googlegroups.com”
  1. git manpage: note git-security@googlegroups.comÆvar Arnfjörð Bjarmason, Mar 8, 2018
  2. Junio C HamanoMar 8, 2018

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.