Add CVE references for CVE-2016-9646, CVE-2016-9645

[git.ikiwiki.info.git] / doc / contact.mdwn

diff --git a/doc/contact.mdwn b/doc/contact.mdwn
index 7d31ddf1078cdce298ced4ff5c30e66583a585be..afcc677650b8d81fe362330b8da95f673b8ce49a 100644 (file)
--- a/doc/contact.mdwn
+++ b/doc/contact.mdwn
@@ -7,5 +7,11 @@ developers monitor [[RecentChanges]] closely, via the webpage, email,
 and IRC, and respond in a timely fashion.
 
 You could also drop by the IRC channel `#ikiwiki` on
 and IRC, and respond in a timely fashion.
 
 You could also drop by the IRC channel `#ikiwiki` on

-[OFTC](http://www.oftc.net/) (`irc.oftc.net`), or use the
-[identi.ca ikiwiki group](http://identi.ca/group/ikiwiki).
+[OFTC](http://www.oftc.net/) (`irc.oftc.net`).
+
+However, if you find a new security vulnerability, please email the maintainers
+privately instead of raising it in a public medium, so that we can
+arrange for coordinated disclosure when a fix is available. The maintainers
+are [[Joey Hess|joey]] (<joey@kitenet.net>),
+[[Simon McVittie|smcv]] (<smcv@debian.org>)
+and [[Amitai Schleier|schmonz]] (<schmonz-web-ikiwiki@schmonz.com>).