Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Who to contact for security issues #6365

Closed
psmoros opened this issue Mar 1, 2023 · 2 comments
Closed

Who to contact for security issues #6365

psmoros opened this issue Mar 1, 2023 · 2 comments
Labels
support Community support

Comments

@psmoros
Copy link

psmoros commented Mar 1, 2023

Hello 馃憢

I run a security community that finds and fixes vulnerabilities in OSS. A researcher (@sl4x0) has found a potential issue, which I would be eager to share with you.

Could you add a SECURITY.md file with an e-mail address for me to send further details to? GitHub recommends a security policy to ensure issues are responsibly disclosed, and it would help direct researchers in the future.

Looking forward to hearing from you 馃憤

(cc @huntr-helper)
@fichtner fichtner added the support Community support label Mar 1, 2023
@fichtner
Copy link
Member

fichtner commented Mar 1, 2023

Hi, see https://docs.opnsense.org/security.html#reporting-an-incident

fichtner pushed a commit that referenced this issue Mar 1, 2023
@AdSchellevis @fichtner
Add SECURITY.md referring to the appropriate doc sections. closes #6365
00ca610 
(cherry picked from commit 2586ae1)
(cherry picked from commit a300d97)
@psmoros
Copy link
Author

psmoros commented Mar 1, 2023

Sorry I hadn't noticed your security page... Thank you! :))

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
support Community support
Milestone
No milestone
Development

No branches or pull requests
2 participants
@fichtner @psmoros