How to report security issues

Hi all,
Is there a private way to report security issues?

Thanks,
Py

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

For cryptsetup? We do not have a private list.

If it is not anything really bad I would prefer to report it as a public bug.

Otherwise you can send an encrypted mail to me as maintainer (using the key which I signed this mail).

You can also report security bug to cryptsetup component in Fedora bugzilla (bugzila.redhat.com)

Red Hat security team will contact me as maintainer anyway.

Milan
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCAAGBQJWG8gRAAoJENmwV3vZPpj8rhcP/1OmdghA414TjX0sPoKQM7ha V3oG+/3qCyyvFt8k77Wxd2ed4e9lkxgnP9ier4nkpID9eTYPEPYf1dcjWZsY9LDm bfTOQXCdudmsiM2ujP5DH371oI/k08ZenfR80xsy0xX9RT9GWEogBwRaJOuBpBAe tgcfPHtcwBtCt7nnpo4/rvsFpUp2d+OSBOaNrijrdQ5kPsa8+w/MGpSMI5WeJfLB ssRzNdmNajz+bxr4XMNBUJuN8NvhtXJdmq4xl1FR4BvXx5A0NcgWp04iGiT0Cww2 KWZuuezNAWhDZJeIGap1lVl4X3bSTHZ415+7FqUGpNCQFyhdVr43cd6DPXNenGUt MUzIRsCcWXY2ecX46sM1zWok1cfBdqPdBFFPqjMS3qrBqdtLA8iDSCjGIYmCyFC9 ovbgVA61wPj0o0+xpwVePWLZTFeCw8oUq8UbApZXLs12Efc9fBZCxPlIadv7Y5Ha YIivPrQNx0K0ON5iaCtjY+znDgZNdCSBivcqapxMMi/RLSrHR/MRGEFPiia+0GBK bfSP5trxx2aAbhPTqPq2UjOtZ3e1x1u+NBWt0pLEyrWTUIA1VoFuNH4wFmw+I4/B P0NGaG2CMEOsSiDvI5dk3bxKiQzR1XmprikM/+wlXYFUK0R4YOlZBbL1Zv/totEa qUro+fx+jLdncv+/t1hH
=RTsC
-----END PGP SIGNATURE-----