security vulnerability disclosure procedure?

2 messages, 2 authors, 2016-06-15 · open the first message on its own page

security vulnerability disclosure procedure?

From: Richard Hansen <hidden>
Date: 2016-06-15 23:00:45

Hi all,

I have discovered a minor security vulnerability.  I could send the
patch to the mailing list, but I wanted someone else to take a look
first just to make sure it's minor enough that folks will think it's OK
to publicly announce.

Who should I send the patch to?

Thanks,
Richard

Re: security vulnerability disclosure procedure?

From: Shawn Pearce <hidden>
Date: 2016-06-15 23:00:45

On Sun, Apr 20, 2014 at 1:42 PM, Richard Hansen [off-list ref] wrote:
I have discovered a minor security vulnerability.  I could send the
patch to the mailing list, but I wanted someone else to take a look
first just to make sure it's minor enough that folks will think it's OK
to publicly announce.

Who should I send the patch to?
Previous issues were routed through the maintainer, Junio directly (CC'd).
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help