Re: recent PSPP vulnerability reports

[shuitao gan]

ok

2017-08-28 7:18 GMT+08:00 Ben Pfaff <address@hidden>:

Thanks for reporting a number of bugs related to vulnerabilities in PSPP
lately.  However, so far you have only reported these bugs downstream,
to Red Hat and SuSE.  Please first report them to the project itself
directly, at address@hidden or via http://sv.gnu.org/p/pspp, or if
you believe that they are serious vulnerabilities then privately to me
or to John Darrington <address@hidden>.  This will allow
the bugs to be fixed more quickly since the PSPP developers find out
about them immediately, not just from downstream packagers.

Thanks,

Ben.