From: Richard Hansen <rhansen@bbn.com>
Date: Sun, 20 Apr 2014 20:42:09 GMT
Subject: security vulnerability disclosure procedure?
Message-ID: <53543121.3000808@bbn.com>

Hi all,

I have discovered a minor security vulnerability.  I could send the
patch to the mailing list, but I wanted someone else to take a look
first just to make sure it's minor enough that folks will think it's OK
to publicly announce.

Who should I send the patch to?

Thanks,
Richard