From 758099ab3b87a2404dcc297ff88260d7a09eccf7 Mon Sep 17 00:00:00 2001 From: Pedro Kaj Kjellerup Nacht Date: Tue, 6 Jun 2023 19:11:44 +0000 Subject: [PATCH] ICU-22410 Add security policy Signed-off-by: Pedro Kaj Kjellerup Nacht Co-authored-by: Markus Scherer --- SECURITY.md | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000000..35f83da51a3 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,24 @@ +# Security Policy + +If you have discovered a security vulnerability in this project, please report it +privately. **Do not disclose it as a public issue.** This gives us time to work with you +to fix the issue before public exposure, reducing the chance that the exploit will be +used before a patch is released. + +Please submit the bug report as an [ICU Jira issue](https://icu.unicode.org/bugs). +Be sure to set "Security level: Sensitive". +This ensures the report will only be visible to the ICU team. + +Please provide the following information in your report: + +- A description of the vulnerability and its impact +- How to reproduce the issue + +This project is maintained by volunteers on a reasonable-effort basis. As such, we ask +that you give us 90 days to work on a fix before public exposure. + + +> Copyright © 2023 and later Unicode, Inc. and others. All Rights Reserved. +Unicode and the Unicode Logo are registered trademarks +of Unicode, Inc. in the U.S. and other countries. +[Terms of Use and License](http://www.unicode.org/copyright.html)