Improve bug reporting documentation, and mention pspp-security list.

[pspp] / README

diff --git a/README b/README
index 1e95af1e902c5d96a55f5717c44d6e51fc9d9c9d..5e7d6a7e1604cacc41fa0300c9c0fb19dd6566c9 100644 (file)
--- a/README
+++ b/README
@@ -35,6 +35,12 @@ or emailed to bug-gnu-pspp@gnu.org.  We prefer the web-based system
 because it makes it more difficult for us to lose track of bugs, but we
 are happy to hear from users through any means.
 
+The PSPP bug tracker and bug reporting mailing list are public.  To
+privately report a security vulnerability in GNU PSPP, please send
+your report to the closed mailing list pspp-security@gnu.org.  The
+PSPP developers will help you assess your report and fix problems
+prior to public disclosure.
+
 The long term goals for PSPP are ambitious.  We wish to provide the
 following support to users: