GNU C Library as its own CNA?

[Paul Eggert]

On 2023-07-28 09:41, Joseph Myers wrote:
> If we add some kind of private submission
> mechanism, we should also strongly discourage its use for the bulk of
> low-risk issues to avoid adding unnecessary overhead for those.

One possibility is to use an already-existing submission mechanism, 
namely the GNU Security Escalation Contact <security@gnu.org>. For what 
it's worth, that mailing list gets little email, mostly false alarms.

https://savannah.gnu.org/mail/?group=security