From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Fri, 14 Nov 2025 17:01:08 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-wm1-f62.google.com (mail-wm1-f62.google.com [209.85.128.62]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 5AEG17Zv010728 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 14 Nov 2025 17:01:07 +0100 Received: by mail-wm1-f62.google.com with SMTP id 5b1f17b1804b1-4775d110fabsf17897385e9.1 for ; Fri, 14 Nov 2025 08:01:07 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1763136062; cv=pass; d=google.com; s=arc-20240605; b=YOML+R/Y5zssaUqngUVOcF9yjI5vvfPnijHCPp7sYMKRuzGZif2grglG96GHhUsQyM sobQ1iwEvtczlEpinqKWsdbSe72NeoQdUGq/QLofekzkBbga18nFOVbDstcbPD3H4z3R wb3UzZe/c1N8ywx17KntLeJRnPmNMBoM0fLJ3JXbR7q9fPg4Nn0DbguHd2GlQvtA6FJt bZN2yu+I8QW1OqfhuPJbvgA2PA3ZIEsgNqwxVIeog3CcQH7ZEw/lbKi/Xrs/XU93oTHH neE10k9rb0CqKlPfKPLQzTdBolNiXd6C9k74ZjwZuC+sEL2jCfIBbcgNzGc0GjRpHT8g xI5g== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:mime-version:message-id:date :subject:to:from:sender:dkim-signature; bh=WPDchBddJ6fVsJDQkWkLtpGMRlmooEmnqt6hzn+/A6M=; fh=+03Zo+N+IBGArvhU15HBhUN4grODN87RHWc0UDY/eC8=; b=C0d4XniGQUAbyiiq+IH/MsQToetqJnL2YAqL72zr0ALLBuOjc04qbr/OqEtrsCP7JX Ds9+4b9l4QY2cZvt1NuI7S99nHifMFc9zEmHZud7zQQ/CKlJtYUKZzM1T08Q8gO25mwo rO3w8UHh5Ns9G1inL9rvvD93PFssAPpCo5OjUeTvM9oO4EbL3YpdTB0+hrmS+Zd9wwEx o9WTbTcA6zjOg/y153unfXAF65ZWDfmI2BGNFHKZNkLin9dfzUQ8Ha5qmgKJT8h1/VlH Nq/sCSuMNiR+b6+yQyUCMXU32LIwhmPbh1aU44APnV/KnnBjvWRkSUDAwGkyPclVFZEa O9YQ==; darn=ilbers.de ARC-Authentication-Results: i=2; gmr-mx.google.com; spf=pass (google.com: domain of wzh@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=wzh@ilbers.de DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1763136062; x=1763740862; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-authentication-results :x-original-sender:mime-version:message-id:date:subject:to:from :sender:from:to:cc:subject:date:message-id:reply-to; bh=WPDchBddJ6fVsJDQkWkLtpGMRlmooEmnqt6hzn+/A6M=; b=VGJZ28Fh2MK2PwpJm94xjHURsTxLfBn8iUe/EAnZvRe7yLLdOtTkX83I/oaJsYVS3G iP1Izc0v+0KM5pvqZDEQclMO3/eiQiqf1+JCXBuuNEkYTzgPX5ISnjD6O1cI1Zko+TIH gw9Tu+pY2dZvfibfFeEf6PZWpe4eBy2kkEXlmwxwAeAC8PQAhp8XWsOpiyBSUIXwNLQy ZnlNfysZm2pof810VtWQcIQhMIvkjRDWTG3rViv19Uekrocu4xa0l8nvTnFfTolHZxlD 0jTu15of9fVfyolwX8DJqHY90K/4Gd/IOLR9quG4x5yyO1pT6sEfiq/Pxumm2DAEJvG6 nhEA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1763136062; x=1763740862; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence :x-original-authentication-results:x-original-sender:mime-version :message-id:date:subject:to:from:x-beenthere:x-gm-message-state :sender:from:to:cc:subject:date:message-id:reply-to; bh=WPDchBddJ6fVsJDQkWkLtpGMRlmooEmnqt6hzn+/A6M=; b=RVMyZ5WO1IPcTusqz+SJSE0cEb1e0swXLW1Qz08YPlLMCN9jRaFBa6VJsY6fPNoA6P 8WmYsNDQaaLiUlbgTgsAo8/NikiZM/Hiog3Lf6YaAbq1R8rR9KVqUYNQKx1EmMeYQC1x jreEgHjWMhAMtpijNDoD+CbmWz2JB5EqM9bP/kkXaFxmkIXTF+peNPnWJOD8/XgY7tYV hHBsgc9mVHKSzBqw4HEnXU3WF/QweukioeBJmMpORsAHckb+isXqJBF+mvIoUM7a8zL4 XyuQwGfrYa/TCyZwH+nku8/1f/8YBPp3vJocYqeVRC7Upen+LMakTcQfMYiVS9DK8VOR Mrig== Sender: isar-users@googlegroups.com X-Forwarded-Encrypted: i=2; AJvYcCVPzb1/7kjsZdisv22NfSscCQv5ifA9nJEXH2GCtZA9aX4TGh+FOgZ4o8JutMWJcn6x7iRy@ilbers.de X-Gm-Message-State: AOJu0Yx2ReN1tOF1D+DzkoKYQEZM2FVrMb/A0QgZ6hJ3qXjMe39nCvC4 6SIWnR8PfJRIil88KRfYxeUeWHZcrx9qYwgAU4yuSuUe8Jm2glm/mFa8 X-Google-Smtp-Source: AGHT+IHpmNpXj1p4ysaPzJO/W+PwltpliDuLzLxNDZJIDgSb5rMyw69vRcxjQjzK/F5BRjXfx2K1LA== X-Received: by 2002:a05:600c:1f87:b0:471:1435:b0ea with SMTP id 5b1f17b1804b1-4778fe795b0mr32983455e9.24.1763136060050; Fri, 14 Nov 2025 08:01:00 -0800 (PST) X-BeenThere: isar-users@googlegroups.com; h="Ae8XA+ZXkV9puF6cJuCwqCzF17+/A05FwCBu7qO+7C2F97dUzw==" Received: by 2002:a05:600c:34d2:b0:477:612f:4953 with SMTP id 5b1f17b1804b1-4778be38a71ls14919645e9.2.-pod-prod-09-eu; Fri, 14 Nov 2025 08:00:57 -0800 (PST) X-Received: by 2002:a05:600c:1f10:b0:477:8b77:155e with SMTP id 5b1f17b1804b1-4778fe4a046mr33167315e9.15.1763136057062; Fri, 14 Nov 2025 08:00:57 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1763136057; cv=none; d=google.com; s=arc-20240605; b=gUZSruLN/FouMm9fefGNFaMCwIbb8KlbxMXONadkbiBzfYJkEYiFJ1gdXriBA8vrks 1twrJsVeEsSmSrWahhoxKAQRM4v/KLAlcWRrbdBxbb2hp3zw1bnMEn76+2JL04KYL+To 2RW7hWKPIqw21nBx27RoHzvHxp2mEFWg7I4t8P+x4fSmXKLrHnIqVraGOuOwA+IhfyVQ C/Mbr/EYISEBCmiJu4q1KCsTY08GqNIBihxooJB7DScfihW/7kLH/5llJJRQH7XRjADJ d+hVBXNDF2MCxfvTvWIgEXa3vo3/qI5MTfm0TbTM7ghg++ze9UG0Tsdt2nV5hjeqseNE jKpA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from; bh=rsfF+Nw1GbeM0I7p3EOYr1582K1u92kP0agfsayDv3c=; fh=7tclEdh7YbwSQowgJ6LNq720O7H5HTEaqj22NJWRE2E=; b=fEReqbONBF2dC0tub6EftzvwAMiutQhfAl/c0/MddlSvd/NIxRFQbdcbgGO3c3UQMM 5ane96P4WiEy9OyOvUo237kxKc5Py4YgN7sTQxh7rXSFG0x3h+Yoo8jAGKrTWXz7VZG+ i88dHG/VVkiWpCk/lLsHSEifpLRNNAIvQTWSQY0jp6XzGbAywSKXLaecHtpPEbNXpqh4 6jbEnurDQlqCqMNIC1QN5AC3YrT0jaj5QN9w2o+jLR9eIhW9QboveXUgkwXo8hN9b1d6 U63v7WLm6F2e640WlzBuS7sNiMAhKhsQx2vSbCZzO2xDgAnYFR+hygYmgGMh/vcmmkNh pSSQ==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of wzh@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=wzh@ilbers.de Received: from shymkent.ilbers.de (shymkent.ilbers.de. [85.214.156.166]) by gmr-mx.google.com with ESMTPS id 5b1f17b1804b1-4778c62eb04si893595e9.0.2025.11.14.08.00.55 for (version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256); Fri, 14 Nov 2025 08:00:55 -0800 (PST) Received-SPF: pass (google.com: domain of wzh@ilbers.de designates 85.214.156.166 as permitted sender) client-ip=85.214.156.166; Received: from debian-zwei.m.ilbers.de ([88.130.203.42]) (authenticated bits=0) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPA id 5AEG0na2010715 for ; Fri, 14 Nov 2025 17:00:55 +0100 From: Zhihang Wei To: isar-users@googlegroups.com Subject: [PATCH v1] Add security policy Date: Fri, 14 Nov 2025 17:00:49 +0100 Message-Id: <20251114160049.848251-1-wzh@ilbers.de> X-Mailer: git-send-email 2.39.5 MIME-Version: 1.0 X-Spam-Status: No, score=-4.6 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_EF,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-Original-Sender: wzh@ilbers.de X-Original-Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of wzh@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=wzh@ilbers.de Content-Type: text/plain; charset="UTF-8" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-TUID: ulfGwzK4Qi5u Signed-off-by: Zhihang Wei Signed-off-by: Baurzhan Ismagulov --- SECURITY.md | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000..276db42c --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,21 @@ +# Security Policy + +## Supported Versions + +Only `master` is supported with security updates. + +## Reporting a Vulnerability + +Please DO NOT report any potential security vulnerability via a public channel +(mailing list, github issue, etc.). Instead, create a report via +https://github.com/ilbers/isar/security/advisories/new or contact the +maintainers by email at security@isar-build.org. Please provide a detailed +description of the issue, the steps to reproduce it, the affected versions and, +if already available, a proposal for a fix. You should receive a response +within 15 business days. If for some reason you do not, please follow up by +email to ensure we received your original message. + +If we confirm the issue as a vulnerability, we will open a Security Advisory on +github and give credits for your report if desired. We follow the coordinated +vulnerability disclosure model and will define an appropriate disclosure +timeline together with you. -- 2.39.5 -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/20251114160049.848251-1-wzh%40ilbers.de.