SECURITY revision 1.1
11.1SchristosPlease report any sensitive security-related bugs via email to the
21.1Schristostzdb designated coordinators, currently Paul Eggert
31.1Schristos<eggert@cs.ucla.edu> and Tim Parenti <tim@timtimeonline.com>.
41.1SchristosPut "tzdb security" at the start of your email's subject line.
51.1SchristosWe prefer communications to be in English.
61.1Schristos
71.1SchristosYou should receive a response within a week. If not, please follow up
81.1Schristosvia email to make sure we received your original message.
91.1Schristos
101.1SchristosIf we confirm the bug, we plan to notify affected third-party services
111.1Schristosor software that we know about, prepare an advisory, commit fixes to
121.1Schristosthe main development branch as quickly as is practical, and finally
131.1Schristospublish the advisory on tz@iana.org.  As with all tzdb contributions,
141.1Schristoswe give credit to security contributors unless they wish to remain
151.1Schristosanonymous.
16