http://www.openbsd.org/security.html#reporting
On 2013 Jul 26 (Fri) at 15:51:39 +0200 (+0200), Maxime Villard wrote: :Hi, :I've found an overflow in ftpd. Even if it is not necessarily a security :issue, I guess it's not a good idea to report it on a public mailing :list. : :So, who am I supposed to contact? : :PS: only @openbsd.org addresses : -- Experience is what you get when you were expecting something else.
