[MPlayer-dev-eng] buffer overflow of the month

[Diego Biurrun]

On Fri, Aug 26, 2005 at 01:05:27PM +0300, Jan Knutar wrote:
> On Thursday 25 August 2005 20:41, Reimar Döffinger wrote:
> 
> > Mailing to -users is not "vendor contacted"
> 
> It is still, however, the listed place to send bug reports to ;-) So he did
> post to correct place, I guess...

Nonsense.  Security problems should be reported in private first, not made
public immediately.

Diego