2023-04-07 12:08:30 +00:00
|
|
|
# Security Policy
|
|
|
|
|
|
2023-04-07 12:46:41 +00:00
|
|
|
If you discover a security vulnerability in this project, please
|
2024-04-09 18:55:01 +00:00
|
|
|
report it privately. **Do not disclose it as a public issue.**
|
2023-04-07 12:08:30 +00:00
|
|
|
|
2024-04-09 18:55:01 +00:00
|
|
|
You may submit a report via email to
|
|
|
|
|
[Lasse Collin](mailto:lasse.collin@tukaani.org)
|
|
|
|
|
(OpenPGP key fingerprint: 3690 C240 CE51 B467 0D30 AD1C 38EE 757D 6918 4620),
|
|
|
|
|
or through
|
2023-04-07 12:42:12 +00:00
|
|
|
[Security Advisories](https://github.com/tukaani-project/xz/security/advisories/new).
|
|
|
|
|
|
2024-04-09 18:55:01 +00:00
|
|
|
This project is maintained by volunteers on a reasonable-effort basis.
|
|
|
|
|
Please give 30 days to work on a fix before public exposure,
|
|
|
|
|
reducing the chance that an exploit will be used before a patch is released.
|
