aboutsummaryrefslogtreecommitdiff
path: root/lib/mbedtls-2.27.0/SECURITY.md
diff options
context:
space:
mode:
Diffstat (limited to 'lib/mbedtls-2.27.0/SECURITY.md')
-rw-r--r--lib/mbedtls-2.27.0/SECURITY.md20
1 files changed, 20 insertions, 0 deletions
diff --git a/lib/mbedtls-2.27.0/SECURITY.md b/lib/mbedtls-2.27.0/SECURITY.md
new file mode 100644
index 0000000..bd18f6c
--- /dev/null
+++ b/lib/mbedtls-2.27.0/SECURITY.md
@@ -0,0 +1,20 @@
+## Reporting Vulneratibilities
+
+If you think you have found an Mbed TLS security vulnerability, then please
+send an email to the security team at
+<mbed-tls-security@lists.trustedfirmware.org>.
+
+## Security Incident Handling Process
+
+Our security process is detailled in our
+[security
+center](https://developer.trustedfirmware.org/w/mbed-tls/security-center/).
+
+Its primary goal is to ensure fixes are ready to be deployed when the issue
+goes public.
+
+## Maintained branches
+
+Only the maintained branches, as listed in [`BRANCHES.md`](BRANCHES.md),
+get security fixes.
+Users are urged to always use the latest version of a maintained branch.