Recommend security@postgresql.org as the contact point for security-related bugs.

diff --git a/doc/bug.template b/doc/bug.template
index 71cbefb70a77602e7ade3e3fdaf9bff598315487..551bb9f956906c13b04432f838d0979c9974d597 100644 (file)
--- a/doc/bug.template
+++ b/doc/bug.template
@@ -1,35 +1,39 @@
 If PostgreSQL failed to compile on your computer or you found a bug that
-is likely to be specific to one platform then please fill out this form
+is likely to be specific to one platform, then please fill out this form
 and e-mail it to pgsql-ports@postgresql.org.
 
-To report any other bug, fill out the form below and e-mail it to
+To report non-porting-related bugs, fill out the form below and e-mail it to
 pgsql-bugs@postgresql.org.
 
+If your bug report has security implications and you'd prefer that it not
+become immediately visible in public archives, don't send it to pgsql-bugs.
+Security issues can be reported privately to security@postgresql.org.
+
 If you not only found the problem but solved it and generated a patch
 then e-mail it to pgsql-patches@postgresql.org instead.  Please use the
 command "diff -c" to generate the patch.
 
 You may also enter a bug report at http://www.postgresql.org/ instead of
-e-mail-ing this form.
+e-mailing this form.
 
 ============================================================================
                         POSTGRESQL BUG REPORT TEMPLATE
 ============================================================================
 
 
-Your name              :       
+Your name              :
 Your email address     :
 
 
-System Configuration
+System Configuration:
 ---------------------
-  Architecture (example: Intel Pentium)        :
+  Architecture (example: Intel Pentium)                :
 
-  Operating System (example: Linux 2.4.18)     :
+  Operating System (example: Linux 2.4.18)     :
 
-  PostgreSQL version (example: PostgreSQL-7.4.7):   PostgreSQL-7.4.7
+  PostgreSQL version (example: PostgreSQL 7.4.7):  PostgreSQL 7.4.7
 
-  Compiler used (example:  gcc 2.95.2)         :
+  Compiler used (example: gcc 3.3.5)           :
 
 
 Please enter a FULL description of your problem:

diff --git a/doc/src/sgml/problems.sgml b/doc/src/sgml/problems.sgml
index ecd7a8740b1bbd0713fb7fec4b035e1c44a12df6..53dd0c673d24af2e322c016bc74354eed9191489 100644 (file)
--- a/doc/src/sgml/problems.sgml
+++ b/doc/src/sgml/problems.sgml
@@ -1,5 +1,5 @@
 <!--
-$Header: /cvsroot/pgsql/doc/src/sgml/problems.sgml,v 2.15 2003/08/10 01:19:18 tgl Exp $
+$Header: /cvsroot/pgsql/doc/src/sgml/problems.sgml,v 2.15.4.1 2005/01/30 21:32:10 tgl Exp $
 -->
 
 <sect1 id="bug-reporting">
@@ -301,6 +301,13 @@ $Header: /cvsroot/pgsql/doc/src/sgml/problems.sgml,v 2.15 2003/08/10 01:19:18 tg
    <email>pgsql-bugs@postgresql.org</email> mailing list.
   </para>
 
+  <para>
+   If your bug report has security implications and you'd prefer that it
+   not become immediately visible in public archives, don't send it to
+   <literal>pgsql-bugs</literal>.  Security issues can be
+   reported privately to <email>security@postgresql.org</email>.
+  </para>
+
   <para> 
    Do not send bug reports to any of the user mailing lists, such as
    <email>pgsql-sql@postgresql.org</email> or