summaryrefslogtreecommitdiffstats
path: root/SECURITY
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-13 13:53:43 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-13 13:53:43 +0000
commitf873a6ab324edf3c9a66d29ba3ab0e3dc6c21e0a (patch)
treed99dab2786b89a9ca35f59f4c88749649ad859e7 /SECURITY
parentInitial commit. (diff)
downloadtzdata-upstream.tar.xz
tzdata-upstream.zip
Adding upstream version 2024a.upstream/2024aupstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'SECURITY')
-rw-r--r--SECURITY15
1 files changed, 15 insertions, 0 deletions
diff --git a/SECURITY b/SECURITY
new file mode 100644
index 0000000..40128bc
--- /dev/null
+++ b/SECURITY
@@ -0,0 +1,15 @@
+Please report any sensitive security-related bugs via email to the
+tzdb designated coordinators, currently Paul Eggert
+<eggert@cs.ucla.edu> and Tim Parenti <tim@timtimeonline.com>.
+Put "tzdb security" at the start of your email's subject line.
+We prefer communications to be in English.
+
+You should receive a response within a week. If not, please follow up
+via email to make sure we received your original message.
+
+If we confirm the bug, we plan to notify affected third-party services
+or software that we know about, prepare an advisory, commit fixes to
+the main development branch as quickly as is practical, and finally
+publish the advisory on tz@iana.org. As with all tzdb contributions,
+we give credit to security contributors unless they wish to remain
+anonymous.