From d40cda00f595f3ec14e103af16824d75aa226428 Mon Sep 17 00:00:00 2001
From: Tom Lane <tgl@sss.pgh.pa.us>
Date: Sun, 30 Jan 2005 21:32:20 +0000
Subject: Recommend security@postgresql.org as the contact point for
 security-related bugs.

---
 doc/src/sgml/problems.sgml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

(limited to 'doc/src')

diff --git a/doc/src/sgml/problems.sgml b/doc/src/sgml/problems.sgml
index 91626d90b25..098dd33fd53 100644
--- a/doc/src/sgml/problems.sgml
+++ b/doc/src/sgml/problems.sgml
@@ -1,5 +1,5 @@
 <!--
-$Header: /cvsroot/pgsql/doc/src/sgml/problems.sgml,v 2.13 2002/01/20 22:19:56 petere Exp $
+$Header: /cvsroot/pgsql/doc/src/sgml/problems.sgml,v 2.13.4.1 2005/01/30 21:32:20 tgl Exp $
 -->
 
 <sect1 id="bug-reporting">
@@ -289,6 +289,13 @@ $Header: /cvsroot/pgsql/doc/src/sgml/problems.sgml,v 2.13 2002/01/20 22:19:56 pe
    <email>pgsql-bugs@postgresql.org</email> mailing list.
   </para>
 
+  <para>
+   If your bug report has security implications and you'd prefer that it
+   not become immediately visible in public archives, don't send it to
+   <literal>pgsql-bugs</literal>.  Security issues can be
+   reported privately to <email>security@postgresql.org</email>.
+  </para>
+
   <para> 
    Do not send bug reports to any of the user mailing lists, such as
    <email>pgsql-sql@postgresql.org</email> or
-- 
cgit v1.2.3