From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Wed, 19 Nov 2025 18:09:17 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-lf1-f57.google.com (mail-lf1-f57.google.com [209.85.167.57]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 5AJH9GmJ005345 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Wed, 19 Nov 2025 18:09:16 +0100 Received: by mail-lf1-f57.google.com with SMTP id 2adb3069b0e04-5958fe96529sf3372646e87.3 for ; Wed, 19 Nov 2025 09:09:16 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1763572151; cv=pass; d=google.com; s=arc-20240605; b=WyimrKeiE74UjDEqusA7Z765rK7uPy3E7ch8WftXBSHuTvXTXbcPy9lFzolteGStIn ksSEJUbISOygBsQh2y7uGbSMNtSEpjTOubmAtl7GTVKuGFSldNwdziBX/9WaVTHKJkJq /urYRKlsFtO9bM02tJpYXZJv6uMBiwY4cYjxmm0YsmTcI89p/uj32QFqlPOzFmsKWjtk S9EjzawRy2aFgrMrByYIGfDQVMFOhUwTwmFBFO1a7UP4bDHHlrQM6C9avOIyf/hDjrgD X28lYOAWLe6MrAZAsC5SyLXiYFYpaeCYgA00SbamN/Ie46o216WIAlio1fx8NK+TnmFt QBvg== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:mime-version:message-id:date :subject:to:from:sender:dkim-signature; bh=zPyhlgzV14P5Dgb++HGpGaDb17whm9tfatMlQ7heY1U=; fh=mXNhPmEVzzHnkZmydwNktWfKuS9X9LoCW1IoH9CyDTk=; b=LqDRrrjTq2jlXaiawMnaQDg0JBpZrGlPQeNs21GEmsN9x+9Pgkzv/raK0ScYW78B5w e4IXJobRjtPvQ88XwXMiJMHyUPDsNUIVilmTeHutYvvZwJbfwnwUuSrEF8CfLfsVpvom QZxuKl3AcR6S/g++04xIm98iM4exH2b7ZQAa6OPgqatwEtl0vKfjl4n7jEjvSrfUwf8n gn5QhE4sRChvfORWWCbalSZrXoB3MNmzEtaqAJKWG9trhe+MJM/H3j+P3lg40kDT6D4i hEDPshjQLSh+YNVKqSKr60+TUGKOJvc6dNV5Nqc9URdccLN/l2fibhGZqhdaQK7Wmh4N yIIA==; darn=ilbers.de ARC-Authentication-Results: i=2; gmr-mx.google.com; spf=pass (google.com: domain of ibr@radix50.net designates 85.214.156.166 as permitted sender) smtp.mailfrom=ibr@radix50.net DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1763572151; x=1764176951; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-authentication-results :x-original-sender:mime-version:message-id:date:subject:to:from :sender:from:to:cc:subject:date:message-id:reply-to; bh=zPyhlgzV14P5Dgb++HGpGaDb17whm9tfatMlQ7heY1U=; b=YtzuvUPqcJrIrrgzbkpSVnO+nSHzyVm9D4myyys1g4uQqmFISwetDBzi8jJpc8ZEhB /PPXjNPpET12teDVX+bT1Syscx/pZjwv3FmlU7fwm2ee4Hqw9GHzOLY1BRDu/J/rwcHR Kx9ZHQrf0J3ZxVpShM42HYOPKE9AmgFl7SsA1GRTtsH8loKeCytpvt14An/KDTyfOR0V CvVoCaMEcousmbPCsdlE9Rj2jd8/dyx7DHItNAjJPLuTwh4/rBom82ckN1kMsf07Ei75 7yQnyKoPG9ybswAQp1deB3JL6xT4szT/ioaIRwEUzWRUDoNADlSIkz7wiKdjmHPnPAtd pIsw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1763572151; x=1764176951; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence :x-original-authentication-results:x-original-sender:mime-version :message-id:date:subject:to:from:x-beenthere:x-gm-message-state :sender:from:to:cc:subject:date:message-id:reply-to; bh=zPyhlgzV14P5Dgb++HGpGaDb17whm9tfatMlQ7heY1U=; b=pU0pqsQRMfENfXUbXGW/kbvu4wuUtbKjKYOiAbf2YL0OWAQWxg5MrBygP24aVHA81m vZhKxWL8IZEhm5bN+rCjWllN1zVXbjjHanTelamPl+D5d4BL/Wi6jIdgGyoPosEbmi92 5xGeulRdmQHpWB7/tKWIYfaG2aLzdAvEoQM4GuMVeIArTk4+bxLaDj5SdUHlFnglryDV 8i0OeVe6kfPm1+EUC/iHH3qLz5HsdVGFxsNa0fxUs5cvGGufkCYbxLgaCyG0gIQMpOnA Nyg18FiijGG2JKlFrWkhTV88QnwoTcC5NzuJHrysZ3mgDW67u3yYEjBbYtkZwc8CeDqw AIgg== Sender: isar-users@googlegroups.com X-Forwarded-Encrypted: i=2; AJvYcCVc7fLhK0eoIb8OJp2Zltjjxp9BcyG23cSxXgIe7otNkihDbdudj6KGR99UdESn1weU2gy5@ilbers.de X-Gm-Message-State: AOJu0YzDwMQ9rh490WcmvmwkLhmeLgZ7St8t7EXbw7ZN1iK8FvceqmER 4agjZT4tFYxkZ2cj1iyDzvZcTZCa7wVD5xqdlvJFvAhS/+T5I1gQ58rW X-Google-Smtp-Source: AGHT+IHtRMaieXK4IYQR/ssjEcpWg0zW/2E7RI9aE5zmlWKl0ZTC6Vax4fQPmcltz55vCl51d9XYtA== X-Received: by 2002:a05:6512:1251:b0:595:8258:ccc4 with SMTP id 2adb3069b0e04-59584262dcdmr7225941e87.47.1763572150594; Wed, 19 Nov 2025 09:09:10 -0800 (PST) X-BeenThere: isar-users@googlegroups.com; h="Ae8XA+atG1zMh+Gb4Hkw2uHbiWV2bxikDzGU+bX9AMwdGYiP+A==" Received: by 2002:a05:6512:3415:b0:596:9d0f:f9e5 with SMTP id 2adb3069b0e04-5969d0ffadbls128109e87.0.-pod-prod-04-eu; Wed, 19 Nov 2025 09:09:07 -0800 (PST) X-Received: by 2002:a05:651c:31da:b0:37b:ba8d:c0db with SMTP id 38308e7fff4ca-37cc6748a43mr728421fa.4.1763572147553; Wed, 19 Nov 2025 09:09:07 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1763572147; cv=none; d=google.com; s=arc-20240605; b=R9yq5wIOjoQXueuLXj5cqxE+pFQd4uqh1FY3oaKDQ6D3JahJaJG3A0+vdsWoiYxxq6 /YESC2zQ+WVVWL4LPVZAyIpgHrYRXcZqK7WY/LZjB9aBoIDdehjsrCfWV1D4rx+9wNqj eV7mKv7Npj3r9lqy0Ls2MD8XUO20tWdID7Um+YOt7B38oNY0M++BNI/dWk7TvFh9nwDA 9qnR88JMkxL5WL9LgoJkUKjQh1EqCU8dh4NBQ0jBrPEoqrVUkiiCZXfBqi0j3559InA6 pvqKW9C+gY4JlIJZDoax5Hl6iJQ8VGa6c1r1LI8km4HPab4Ur6nb8GKWoSZKuaZXFgoC /CGA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from; bh=5iZITJk40kBMrPJDWozxPzVseTk1ewoFkAXH49L04Gw=; fh=7tclEdh7YbwSQowgJ6LNq720O7H5HTEaqj22NJWRE2E=; b=kWVF3g0+rmnj9o0+Qe2LmM8dEbphcRnzgvPS7P2zvHFwh4aowDCT7GbWwxAH+GBYB2 lIQv/loFsQiELYqH3lYtoh+jZSPnTOU9Q+4b8YUhqomyfJtmftgkM+YBNkQexTYApIo3 /4IFon+0kf1YKGmmZohDtVSJzcPHi2/WM4A8LAfySAmn69dkILuJcyLCSGkcgIJpSCfy 4EuUx5s7TDyAY4UUapLWtUqWUHD9rA/xWhDkhAqg+n4YPq8xr0ecTNheC4n4+QhVhiL+ 1d9h0kU7bHrgoTi8jh+M172SjFV48l1mkfZKRXTEnUkh8moCdCXB2JP6PMSxIVrYx2iM /9Qg==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of ibr@radix50.net designates 85.214.156.166 as permitted sender) smtp.mailfrom=ibr@radix50.net Received: from shymkent.ilbers.de (shymkent.ilbers.de. [85.214.156.166]) by gmr-mx.google.com with ESMTPS id 38308e7fff4ca-37b9cec7909si3682151fa.7.2025.11.19.09.09.07 for (version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256); Wed, 19 Nov 2025 09:09:07 -0800 (PST) Received-SPF: pass (google.com: domain of ibr@radix50.net designates 85.214.156.166 as permitted sender) client-ip=85.214.156.166; Received: from abai.m.ilbers.de ([88.130.203.42]) (authenticated bits=0) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPA id 5AJH96j7005330 for ; Wed, 19 Nov 2025 18:09:06 +0100 From: Baurzhan Ismagulov To: isar-users@googlegroups.com Subject: [PATCH v2] Add security policy Date: Wed, 19 Nov 2025 18:09:06 +0100 Message-Id: <20251119170906.1342632-1-ibr@radix50.net> X-Mailer: git-send-email 2.39.5 MIME-Version: 1.0 X-Spam-Status: No, score=-4.6 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_EF,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-Original-Sender: ibr@radix50.net X-Original-Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of ibr@radix50.net designates 85.214.156.166 as permitted sender) smtp.mailfrom=ibr@radix50.net Content-Type: text/plain; charset="UTF-8" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-TUID: xwHvaE1DNHSD From: Zhihang Wei Signed-off-by: Zhihang Wei Signed-off-by: Baurzhan Ismagulov --- SECURITY.md | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000..2ba12ff8 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,21 @@ +# Security Policy + +## Supported Versions + +Security updates will only be provided on top of the `master` branch. + +## Reporting a Vulnerability + +Please DO NOT report any potential security vulnerability via a public channel +(mailing list, github issue, etc.). Instead, create a report via +https://github.com/ilbers/isar/security/advisories/new or contact the +maintainers by email at security@isar-build.org. Please provide a detailed +description of the issue, the steps to reproduce it, the affected versions and, +if already available, a proposal for a fix. You should receive a response +within 15 business days. If for some reason you do not, please follow up by +email to ensure we received your original message. + +If we confirm the issue as a vulnerability, we will open a Security Advisory on +github and give credits for your report if desired. We follow the coordinated +vulnerability disclosure model and will define an appropriate disclosure +timeline together with you. -- 2.39.5 -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/20251119170906.1342632-1-ibr%40radix50.net.