Re: security vulnerability disclosure procedure?
- From
Shawn Pearce <spearce@spearce.org>
- Date
- Apr 21, 2014, 18:07 UTC
- Message-ID
- <CAJo=hJsU7hLMwkvPMqM7J7Tj0svQzQwp8xXHRKr=Gp8W6j55dA@mail.gmail.com>
- In-Reply-To
- <53543121.3000808@bbn.com>
On Sun, Apr 20, 2014 at 1:42 PM, Richard Hansen <rhansen@bbn.com> wrote:
Show 6 quoted lines
> I have discovered a minor security vulnerability. I could send the > patch to the mailing list, but I wanted someone else to take a look > first just to make sure it's minor enough that folks will think it's OK > to publicly announce. > > Who should I send the patch to?
Previous issues were routed through the maintainer, Junio directly (CC'd).