To some mailing list and to some maintainers. As I recall it was also a separate report for tar. But it’s been 7 years already..