Who should security issues be reported to?

[Fredrik Lundh]

Duncan Booth wrote:

> I think its a bit borderline whether this really was a security bug in
> Python rather than just a problem with the way some people used Python. It
> was a standard library which if used in the wrong way opens a security hole
> on your machine

for SmartCookie, that should be "if used, opens a security hole"

</F>