How can I report bugs in OpenJDK?

[dalibor topic]

On 03.12.2015 14:37, Matthias-Christian Ott wrote:
> However, a short remark about the
> justification: are bug reports non-technical in your opinion?

It depends on the bug report, ultimately.

For example, if the 'bug' one is trying to report is 'I read something 
somewhere on the Internet, is it really true?' then that's not actually 
technical, even when presented as a bug report of sorts ...

> and who decides whether and when a security vulnerability
> reported to secalert_us at oracle.com becomes an issue in JBS?

Please see [0] for information about Oracle's Security Vulnerability 
Remediation Practices.

cheers,
dalibor topic

[0] 
https://www.oracle.com/support/assurance/vulnerability-remediation/introduction.html
-- 
<http://www.oracle.com> Dalibor Topic | Principal Product Manager
Phone: +494089091214 <tel:+494089091214> | Mobile: +491737185961
<tel:+491737185961>

ORACLE Deutschland B.V. & Co. KG | Kühnehöfe 5 | 22761 Hamburg

ORACLE Deutschland B.V. & Co. KG
Hauptverwaltung: Riesstr. 25, D-80992 München
Registergericht: Amtsgericht München, HRA 95603

Komplementärin: ORACLE Deutschland Verwaltung B.V.
Hertogswetering 163/167, 3543 AS Utrecht, Niederlande
Handelsregister der Handelskammer Midden-Niederlande, Nr. 30143697
Geschäftsführer: Alexander van der Ven, Astrid Kepper, Val Maher

<http://www.oracle.com/commitment> Oracle is committed to developing
practices and products that help protect the environment