[NBLUG/talk] reporting a bug in a major distro

[Devin Carraway]

On Sat, Aug 23, 2003 at 09:38:28PM -0700, error wrote:
> What would be your opinion on the correct way to report it?

Most every distro has a security contact and a recommended procedure for
notifying them of vulnterabilities.  Use it if the vulnterability you're
looking at is distro-specific; indeed this isn't a bad procedure anyway,
since distros are accustomed to dealing with these sorts of things and
have preestablished relationships & credibility with upstream authors.