[tz] [PROPOSED 1/2] * SECURITY: New file.
Paul Eggert
eggert at cs.ucla.edu
Tue Apr 20 07:06:02 UTC 2021
---
SECURITY | 15 +++++++++++++++
1 file changed, 15 insertions(+)
create mode 100644 SECURITY
diff --git a/SECURITY b/SECURITY
new file mode 100644
index 0000000..40128bc
--- /dev/null
+++ b/SECURITY
@@ -0,0 +1,15 @@
+Please report any sensitive security-related bugs via email to the
+tzdb designated coordinators, currently Paul Eggert
+<eggert at cs.ucla.edu> and Tim Parenti <tim at timtimeonline.com>.
+Put "tzdb security" at the start of your email's subject line.
+We prefer communications to be in English.
+
+You should receive a response within a week. If not, please follow up
+via email to make sure we received your original message.
+
+If we confirm the bug, we plan to notify affected third-party services
+or software that we know about, prepare an advisory, commit fixes to
+the main development branch as quickly as is practical, and finally
+publish the advisory on tz at iana.org. As with all tzdb contributions,
+we give credit to security contributors unless they wish to remain
+anonymous.
--
2.27.0
More information about the tz
mailing list