2020-07-18 17:26:41 +00:00
|
|
|
# Security Policy
|
|
|
|
|
|
|
|
|
|
## Supported Versions
|
|
|
|
|
|
|
|
|
|
Security fixes will be backported to the most recent three minor version lines.
|
|
|
|
|
|
|
|
|
|
## Reporting a Vulnerability
|
|
|
|
|
|
2021-08-08 10:12:16 +00:00
|
|
|
Please report security bugs by email to rustls-security@googlegroups.com.
|
|
|
|
|
We'll then:
|
2020-07-18 17:26:41 +00:00
|
|
|
|
|
|
|
|
- Prepare a fix and regression tests.
|
|
|
|
|
- Backport the fix and make a patch release for most recent release.
|
|
|
|
|
- Submit an advisory to [rustsec/advisory-db](https://github.com/RustSec/advisory-db).
|
|
|
|
|
- Refer to the advisory on the main README.md and release notes.
|
|
|
|
|
|
|
|
|
|
If you're *looking* for security bugs, this crate is set up for
|
|
|
|
|
`cargo fuzz` but would benefit from more runtime, targets and corpora.
|
