1
0
mirror of https://git.tukaani.org/xz.git synced 2025-02-15 13:08:11 +00:00
xz/.github/SECURITY.md

15 lines
618 B
Markdown
Raw Normal View History

# Security Policy
2023-04-07 20:46:41 +08:00
If you discover a security vulnerability in this project, please
2024-04-09 21:55:01 +03:00
report it privately. **Do not disclose it as a public issue.**
2024-04-09 21:55:01 +03:00
You may submit a report via email to
[Lasse Collin](mailto:lasse.collin@tukaani.org)
(OpenPGP key fingerprint: 3690 C240 CE51 B467 0D30 AD1C 38EE 757D 6918 4620),
or through
2023-04-07 20:42:12 +08:00
[Security Advisories](https://github.com/tukaani-project/xz/security/advisories/new).
2024-04-09 21:55:01 +03:00
This project is maintained by volunteers on a reasonable-effort basis.
Please give 30 days to work on a fix before public exposure,
reducing the chance that an exploit will be used before a patch is released.