xref: /freebsd/contrib/tzdata/SECURITY (revision a86dc94b84d177da8f00d1c9420ef0860576e4c4)
193d120dbSPhilip PaepsPlease report any sensitive security-related bugs via email to the
293d120dbSPhilip Paepstzdb designated coordinators, currently Paul Eggert
393d120dbSPhilip Paeps<eggert@cs.ucla.edu> and Tim Parenti <tim@timtimeonline.com>.
4*a86dc94bSPhilip PaepsPut “tzdb security” at the start of your email’s subject line.
593d120dbSPhilip PaepsWe prefer communications to be in English.
693d120dbSPhilip Paeps
793d120dbSPhilip PaepsYou should receive a response within a week. If not, please follow up
893d120dbSPhilip Paepsvia email to make sure we received your original message.
993d120dbSPhilip Paeps
1093d120dbSPhilip PaepsIf we confirm the bug, we plan to notify affected third-party services
1193d120dbSPhilip Paepsor software that we know about, prepare an advisory, commit fixes to
1293d120dbSPhilip Paepsthe main development branch as quickly as is practical, and finally
1393d120dbSPhilip Paepspublish the advisory on tz@iana.org.  As with all tzdb contributions,
1493d120dbSPhilip Paepswe give credit to security contributors unless they wish to remain
1593d120dbSPhilip Paepsanonymous.
16