Reporting of potential security issues in binutils ?

[Tim Rühsen]

Hi,

what is the preferred way (or policy) to report security related issues
like buffer overflows ? The bug tracker seems to have no 'confidential'
flag. I just don't want to accidentally disclose such an issue.

Regards, Tim

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://sourceware.org/pipermail/binutils/attachments/20191108/3f128dbe/attachment.sig>