RE: Submitting security-related bugs

"Cantor, Scott" <[email protected]> Mon, 24 Jul 2017 13:00:44 +0000

Newsgroups	gmane.text.xml.xerces-j.user
Message-ID	<9846A6064BD102419D06814DD0D78DE13BCB76F0@CIO-TNC-D2MBX02.osuad.osu.edu>

> is there a procedure for reporting security-related bugs in Xerces-J? I suspect
> that bugs reported through Jira are directly visible to everyone, so that this
> approach might not be suitable for security issues.

http://apache.org/security/

-- Scott