From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gmazyland@gmail.com>
Received: from mail-wi0-x232.google.com (mail-wi0-x232.google.com
 [IPv6:2a00:1450:400c:c05::232])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (No client certificate requested)
 by mail.server123.net (Postfix) with ESMTPS
 for <dm-crypt@saout.de>; Mon, 12 Oct 2015 16:47:47 +0200 (CEST)
Received: by wicgb1 with SMTP id gb1so152157131wic.1
 for <dm-crypt@saout.de>; Mon, 12 Oct 2015 07:47:47 -0700 (PDT)
References: <72c0a69c1e7d5.561bdb0d@studenti.unimi.it>
From: Milan Broz <gmazyland@gmail.com>
Message-ID: <561BC811.7070900@gmail.com>
Date: Mon, 12 Oct 2015 16:47:45 +0200
MIME-Version: 1.0
In-Reply-To: <72c0a69c1e7d5.561bdb0d@studenti.unimi.it>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit
Subject: Re: [dm-crypt] How to report security issues
List-Id: <dm-crypt.saout.de>
List-Unsubscribe: <http://www.saout.de/mailman/options/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=unsubscribe>
List-Archive: <http://www.saout.de/pipermail/dm-crypt/>
List-Post: <mailto:dm-crypt@saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Subscribe: <http://www.saout.de/mailman/listinfo/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=subscribe>
To: Simone Bossi <simone.bossi2@studenti.unimi.it>
Cc: dm-crypt <dm-crypt@saout.de>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 10/12/2015 04:08 PM, Simone Bossi wrote:
> Is there a private way to report security issues?

For cryptsetup? We do not have a private list.

If it is not anything really bad I would prefer to report
it as a public bug.

Otherwise you can send an encrypted mail to me as maintainer
(using the key which I signed this mail).

You can also report security bug to cryptsetup component
in Fedora bugzilla (bugzila.redhat.com)

Red Hat security team will contact me as maintainer anyway.

Milan
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=RTsC
-----END PGP SIGNATURE-----