* Charo: > Is there any private list or something like that to report it > or should I use the GCC bug tracker?
You could pick one of the distributions and let them handle this: * Debian <secur...@debian.org> * Red Hat <secal...@redhat.com> * SUSE <secur...@suse.com> Just contacting one distribution is sufficient.