xref: /freebsd/contrib/tzcode/SECURITY (revision ff2c98b30b57b9763e2a6575f729bab676e6c025)
1bc421551SDag-Erling SmørgravPlease report any sensitive security-related bugs via email to the
2bc421551SDag-Erling Smørgravtzdb designated coordinators, currently Paul Eggert
3bc421551SDag-Erling Smørgrav<eggert@cs.ucla.edu> and Tim Parenti <tim@timtimeonline.com>.
4*ff2c98b3SDag-Erling SmørgravPut “tzdb security” at the start of your email’s subject line.
5bc421551SDag-Erling SmørgravWe prefer communications to be in English.
6bc421551SDag-Erling Smørgrav
7bc421551SDag-Erling SmørgravYou should receive a response within a week. If not, please follow up
8bc421551SDag-Erling Smørgravvia email to make sure we received your original message.
9bc421551SDag-Erling Smørgrav
10bc421551SDag-Erling SmørgravIf we confirm the bug, we plan to notify affected third-party services
11bc421551SDag-Erling Smørgravor software that we know about, prepare an advisory, commit fixes to
12bc421551SDag-Erling Smørgravthe main development branch as quickly as is practical, and finally
13bc421551SDag-Erling Smørgravpublish the advisory on tz@iana.org.  As with all tzdb contributions,
14bc421551SDag-Erling Smørgravwe give credit to security contributors unless they wish to remain
15bc421551SDag-Erling Smørgravanonymous.
16