xref: /freebsd/contrib/tzcode/SECURITY (revision bc42155199b5b0b479311e05b07aee7f6f9c5172)
1*bc421551SDag-Erling SmørgravPlease report any sensitive security-related bugs via email to the
2*bc421551SDag-Erling Smørgravtzdb designated coordinators, currently Paul Eggert
3*bc421551SDag-Erling Smørgrav<eggert@cs.ucla.edu> and Tim Parenti <tim@timtimeonline.com>.
4*bc421551SDag-Erling SmørgravPut "tzdb security" at the start of your email's subject line.
5*bc421551SDag-Erling SmørgravWe prefer communications to be in English.
6*bc421551SDag-Erling Smørgrav
7*bc421551SDag-Erling SmørgravYou should receive a response within a week. If not, please follow up
8*bc421551SDag-Erling Smørgravvia email to make sure we received your original message.
9*bc421551SDag-Erling Smørgrav
10*bc421551SDag-Erling SmørgravIf we confirm the bug, we plan to notify affected third-party services
11*bc421551SDag-Erling Smørgravor software that we know about, prepare an advisory, commit fixes to
12*bc421551SDag-Erling Smørgravthe main development branch as quickly as is practical, and finally
13*bc421551SDag-Erling Smørgravpublish the advisory on tz@iana.org.  As with all tzdb contributions,
14*bc421551SDag-Erling Smørgravwe give credit to security contributors unless they wish to remain
15*bc421551SDag-Erling Smørgravanonymous.
16