reporting a security issue in gcc / bugzilla account
Jeff Law
law@redhat.com
Thu May 4 14:41:00 GMT 2017
On 05/03/2017 03:58 PM, Frank Ch. Eigler wrote:
> Hi -
>
>> I'd like to have a gcc bugzilla account.
>
> Done, enjoy.
>
>> That said, I have found a few security issues in gcc.
>> Is there a way to safely report these through bugzilla?
>> What is the preferred point of contact for these types of issues?
>
> I am not aware of any sort of confidential security contact for gcc.
> Unless you have some reason to believe it's a non-trivial severity
> (CVSS score), maybe might just as well post it publicly.
Right. We really don't bother with embargos and the like.
Jeff
More information about the Overseers
mailing list