X-Git-Url: https://git.openssl.org/gitweb/?a=blobdiff_plain;f=FAQ;h=c4c2848040e524cca70e7cccee3097549a0b7f2f;hb=f8cee9d08181f9e966ef01d3b69ba78b6cb7c8a8;hp=550a998e6fba9e4c66cc3471aed727b695a0e1fb;hpb=e796666d34c24b96943ae653dc93371bcae19021;p=openssl.git

diff --git a/FAQ b/FAQ
index 550a998e6f..c4c2848040 100644
--- a/FAQ
+++ b/FAQ
@@ -755,6 +755,9 @@ LOT of false positives.
 
 * I'm SURE I've found a bug, how do I report it?
 
+To avoid duplicated reports check the mailing lists and release notes for the
+relevant version of OpenSSL to see if the problem has been reported already.
+
 Bug reports with no security implications should be sent to the request
 tracker. This can be done by mailing the report to <rt@openssl.org> (or its
 alias <openssl-bugs@openssl.org>), please note that messages sent to the
@@ -786,6 +789,9 @@ more active team members (e.g. Steve). If you wish to use PGP to send
 in a report please use one or more of the keys of the team members listed
 at <URL: http://www.openssl.org/about/>
 
+Note that bugs only present in the openssl utility are not in general
+considered to be security issues. 
+
 [PROG] ========================================================================
 
 * Is OpenSSL thread-safe?