diff options
-rw-r--r-- | SECURITY.md | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000000..1b63da4f69 --- /dev/null +++ b/SECURITY.md | |||
@@ -0,0 +1,22 @@ | |||
1 | How to Report a Potential Vulnerability? | ||
2 | ======================================== | ||
3 | |||
4 | If you would like to report a public issue (for example, one with a released | ||
5 | CVE number), please report it using the | ||
6 | [https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Security Security Bugzilla] | ||
7 | |||
8 | If you are dealing with a not-yet released or urgent issue, please send a | ||
9 | message to security AT yoctoproject DOT org, including as many details as | ||
10 | possible: the layer or software module affected, the recipe and its version, | ||
11 | and any example code, if available. | ||
12 | |||
13 | Branches maintained with security fixes | ||
14 | --------------------------------------- | ||
15 | |||
16 | See [https://wiki.yoctoproject.org/wiki/Stable_Release_and_LTS Stable release and LTS] | ||
17 | for detailed info regarding the policies and maintenance of Stable branches. | ||
18 | |||
19 | The [https://wiki.yoctoproject.org/wiki/Releases Release page] contains a list of all | ||
20 | releases of the Yocto Project. Versions in grey are no longer actively maintained with | ||
21 | security patches, but well-tested patches may still be accepted for them for | ||
22 | significant issues. | ||