reporting a security issue in gcc / bugzilla account

Jeff Law law@redhat.com
Thu May 4 14:41:00 GMT 2017


On 05/03/2017 03:58 PM, Frank Ch. Eigler wrote:
> Hi -
> 
>> I'd like to have a gcc bugzilla account.
> 
> Done, enjoy.
> 
>> That said, I have found a few security issues in gcc.
>> Is there a way to safely report these through bugzilla?
>> What is the preferred point of contact for these types of issues?
> 
> I am not aware of any sort of confidential security contact for gcc.
> Unless you have some reason to believe it's a non-trivial severity
> (CVSS score), maybe might just as well post it publicly.
Right.  We really don't bother with embargos and the like.

Jeff



More information about the Overseers mailing list