Policy for posting security bug reports?

[Petr Baudis]

On Sat, Jun 23, 2012 at 09:29:26AM -0700, Paul Eggert wrote:
> There is a formal channel between US-CERT and the GNU C
> library developers.  It used to see some activity, but
> the hotline hasn't rung for quite some time, presumably
> since nothing has been important enough.

That's interesting. To which GNU C library developers does
the hotline go? I'm just wondering if it will still work well
after the recent significant changes in glibc development.

				Petr "Pasky" Baudis