xref: /freebsd/contrib/tzdata/SECURITY (revision 93d120dbc0d039ebd3d421aad169b6a2e3ac7dbe)
1*93d120dbSPhilip PaepsPlease report any sensitive security-related bugs via email to the
2*93d120dbSPhilip Paepstzdb designated coordinators, currently Paul Eggert
3*93d120dbSPhilip Paeps<eggert@cs.ucla.edu> and Tim Parenti <tim@timtimeonline.com>.
4*93d120dbSPhilip PaepsPut "tzdb security" at the start of your email's subject line.
5*93d120dbSPhilip PaepsWe prefer communications to be in English.
6*93d120dbSPhilip Paeps
7*93d120dbSPhilip PaepsYou should receive a response within a week. If not, please follow up
8*93d120dbSPhilip Paepsvia email to make sure we received your original message.
9*93d120dbSPhilip Paeps
10*93d120dbSPhilip PaepsIf we confirm the bug, we plan to notify affected third-party services
11*93d120dbSPhilip Paepsor software that we know about, prepare an advisory, commit fixes to
12*93d120dbSPhilip Paepsthe main development branch as quickly as is practical, and finally
13*93d120dbSPhilip Paepspublish the advisory on tz@iana.org.  As with all tzdb contributions,
14*93d120dbSPhilip Paepswe give credit to security contributors unless they wish to remain
15*93d120dbSPhilip Paepsanonymous.
16