[Bug-cpio] Problems with cpio and tar, security contact?

[halfdog]

Hello gnu.org,

I don't know if you get notifications about bugs in gnu.org software when a bug 
is reported in a gnu.org related package via launchpad. If not, is there someone 
to contact for security issues in cpio and tar?

Regards, Roman