[dm-crypt] How to report security issues

[dm-crypt] How to report security issues

[Simone Bossi]

[-- Attachment #1: Type: text/plain, Size: 70 bytes --]

Hi all,
Is there a private way to report security issues?

Thanks,
Py

[-- Attachment #2: Type: text/html, Size: 91 bytes --]

Re: [dm-crypt] How to report security issues

[Milan Broz]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 10/12/2015 04:08 PM, Simone Bossi wrote:
> Is there a private way to report security issues?

For cryptsetup? We do not have a private list.

If it is not anything really bad I would prefer to report
it as a public bug.

Otherwise you can send an encrypted mail to me as maintainer
(using the key which I signed this mail).

You can also report security bug to cryptsetup component
in Fedora bugzilla (bugzila.redhat.com)

Red Hat security team will contact me as maintainer anyway.

Milan
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=RTsC
-----END PGP SIGNATURE-----