[tz] [PROPOSED 1/2] * SECURITY: New file.

Paul Eggert eggert at cs.ucla.edu
Tue Apr 20 07:06:02 UTC 2021


---
 SECURITY | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 SECURITY

diff --git a/SECURITY b/SECURITY
new file mode 100644
index 0000000..40128bc
--- /dev/null
+++ b/SECURITY
@@ -0,0 +1,15 @@
+Please report any sensitive security-related bugs via email to the
+tzdb designated coordinators, currently Paul Eggert
+<eggert at cs.ucla.edu> and Tim Parenti <tim at timtimeonline.com>.
+Put "tzdb security" at the start of your email's subject line.
+We prefer communications to be in English.
+
+You should receive a response within a week. If not, please follow up
+via email to make sure we received your original message.
+
+If we confirm the bug, we plan to notify affected third-party services
+or software that we know about, prepare an advisory, commit fixes to
+the main development branch as quickly as is practical, and finally
+publish the advisory on tz at iana.org.  As with all tzdb contributions,
+we give credit to security contributors unless they wish to remain
+anonymous.
-- 
2.27.0



More information about the tz mailing list