You can file an issue here, checking the "This issue is confidential"
box to make sure it's not public:
https://gitlab.xiph.org/xiph/vorbis/issues/new?issue%5Bassignee_id%5D=&issue%5Bmilestone_id%5D
Alternately, you can email me (I'm the vorbis maintainer).
Thomas
On 11/30/18 1:13 AM, niuguoxiang wrote:> Hi,
>
>
>
> I found some issues about libvorbis, as they may be potential
> vulnerabilities, who I can contact before disclosing?
>
>
>
> Thanks.
>
>
>
> guoxiang niu
>
>
>
> 华为技术有限公司Huawei Technologies Co., Ltd.
> Company_logo
>
> ------------------------------------------------------------------------
>
> 本邮件及其附件含有华为公司的保密信息,仅限于发送给上面地址中列出的个人或
> 群组。禁
> 止任何其他人以任何形式使用(包括但不限于全部或部分地泄露、复制、或散发)
> 本邮件中
> 的信息。如果您错收了本邮件,请您立即电话或邮件通知发件人并删除本邮件!
> This e-mail and its attachments contain confidential information from
> HUAWEI, which
> is intended only for the person or entity whose address is listed above.
> Any use of the
> information contained herein in any way (including, but not limited to,
> total or partial
> disclosure, reproduction, or dissemination) by persons other than the
> intended
> recipient(s) is prohibited. If you receive this e-mail in error, please
> notify the sender by
> phone or email immediately and delete it!
>
>
>
>
> _______________________________________________
> Vorbis-dev mailing list
> Vorbis-dev at xiph.org
> http://lists.xiph.org/mailman/listinfo/vorbis-dev
>