Re: security vulnerability disclosure procedure?

2014-04-21 Thread Shawn Pearce
On Sun, Apr 20, 2014 at 1:42 PM, Richard Hansen wrote: > I have discovered a minor security vulnerability. I could send the > patch to the mailing list, but I wanted someone else to take a look > first just to make sure it's minor enough that folks will think it's OK > to publicly announce. > > W

security vulnerability disclosure procedure?

2014-04-20 Thread Richard Hansen
Hi all, I have discovered a minor security vulnerability. I could send the patch to the mailing list, but I wanted someone else to take a look first just to make sure it's minor enough that folks will think it's OK to publicly announce. Who should I send the patch to? Thanks, Richard -- To unsu