security vulnerability disclosure procedure?

DISCUSSION Richard Hansen 2 participants 2 messages Jun 15, 2016

Share & tools

Richard Hansen

author

2016-06-15 23:00 UTC #0 lore raw

Hi all,

I have discovered a minor security vulnerability. I could send the patch to the mailing list, but I wanted someone else to take a look first just to make sure it's minor enough that folks will think it's OK to publicly announce.

Who should I send the patch to?

Thanks,
Richard

Shawn Pearce

2016-06-15 23:00 UTC #1 lore raw

Quoted 6 lines · Richard Hansen

I have discovered a minor security vulnerability. I could send the patch to the mailing list, but I wanted someone else to take a look first just to make sure it's minor enough that folks will think it's OK to publicly announce.
Who should I send the patch to?

Previous issues were routed through the maintainer, Junio directly (CC'd).