glenn 2002/09/27 17:35:03 Modified: xdocs bugreport.xml Log: Add info on how to report a security bug Revision Changes Path 1.3 +5 -0 jakarta-tomcat-site/xdocs/bugreport.xml Index: bugreport.xml =================================================================== RCS file: /home/cvs/jakarta-tomcat-site/xdocs/bugreport.xml,v retrieving revision 1.2 retrieving revision 1.3 diff -u -r1.2 -r1.3 --- bugreport.xml 11 Apr 2002 01:47:29 -0000 1.2 +++ bugreport.xml 28 Sep 2002 00:35:03 -0000 1.3 @@ -15,6 +15,11 @@ who assist on a day to day basis resolving bug reports do this for a wide variety of reasons, and almost all of them do this on their own time.</p> +<p>If you have a verified security bug to report please do not post it +to email lists or submit a bug report. Security bugs should be reported +privately by email to <a href="mailto:[EMAIL PROTECTED]">[EMAIL PROTECTED]</a>. +</p> + <p>Many bugs reported end up not being a bug in the Tomcat code, but are due to misconfiguration, problems caused by installed applications, the operating system, etc.
-- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>