X-Git-Url: https://pintos-os.org/cgi-bin/gitweb.cgi?a=blobdiff_plain;f=README;h=5e7d6a7e1604cacc41fa0300c9c0fb19dd6566c9;hb=refs%2Fheads%2Ffbuf;hp=1e95af1e902c5d96a55f5717c44d6e51fc9d9c9d;hpb=fe7fdc98b6967092d02a98227080865e0c8e22ec;p=pspp

diff --git a/README b/README
index 1e95af1e90..5e7d6a7e16 100644
--- a/README
+++ b/README
@@ -35,6 +35,12 @@ or emailed to bug-gnu-pspp@gnu.org.  We prefer the web-based system
 because it makes it more difficult for us to lose track of bugs, but we
 are happy to hear from users through any means.
 
+The PSPP bug tracker and bug reporting mailing list are public.  To
+privately report a security vulnerability in GNU PSPP, please send
+your report to the closed mailing list pspp-security@gnu.org.  The
+PSPP developers will help you assess your report and fix problems
+prior to public disclosure.
+
 The long term goals for PSPP are ambitious.  We wish to provide the
 following support to users: