From: Shawn Pearce <spearce@spearce.org>
Date: Mon, 21 Apr 2014 18:07:17 GMT
Subject: Re: security vulnerability disclosure procedure?
Message-ID: <CAJo=hJsU7hLMwkvPMqM7J7Tj0svQzQwp8xXHRKr=Gp8W6j55dA@mail.gmail.com>
In-Reply-To: <53543121.3000808@bbn.com>

On Sun, Apr 20, 2014 at 1:42 PM, Richard Hansen <rhansen@bbn.com> wrote:
> I have discovered a minor security vulnerability.  I could send the
> patch to the mailing list, but I wanted someone else to take a look
> first just to make sure it's minor enough that folks will think it's OK
> to publicly announce.
>
> Who should I send the patch to?

Previous issues were routed through the maintainer, Junio directly (CC'd).