how to report security bugs?

[Petr Špaček <petr spacek nic cz>]

Hello,

what is the recommended way to report security bugs?

I have an archive which reproducibly crashes MC even though the archive itself is fine (passes integrity 
check and can be decompressed without causing problems in decompressor).

I don't know if the bug is exploitable or not so I'm looking for a proper channel.

Thank you.

-- 
Petr Špaček  @  CZ.NIC