[ https://issues.apache.org/jira/browse/HIVE-3689?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13493297#comment-13493297 ]
Eli Collins commented on HIVE-3689: ----------------------------------- In Hadoop you have to be a committer to subscribe to the security@ list. The process we follow is pretty similar to the one here: http://www.apache.org/security/committers.html > Update website with info on how to report security bugs > -------------------------------------------------------- > > Key: HIVE-3689 > URL: https://issues.apache.org/jira/browse/HIVE-3689 > Project: Hive > Issue Type: Task > Components: Documentation > Reporter: Eli Collins > > The Hive website should be updated with information on how to report > potential security vulnerabilities. In Hadoop land we have a private security > list that anyone case post to that we point to on our list page: Hadoop > example http://hadoop.apache.org/general_lists.html#Security. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira