Possible Security Bug
Hi,
What is an appropriate forum for discussing what seems to be a security bug that I ran into?
Op 24 mrt 2024 om 15:12 heeft Gordan Bobic via discuss discuss@lists.mariadb.org het volgende geschreven:
Hi,
What is an appropriate forum for discussing what seems to be a security bug that I ran into?
From https://mariadb.com/kb/en/security/:
“Sensitive security issues can be reported on https://hackerone.com/mariadb or sent directly to the persons responsible for MariaDB security: security [AT] mariadb (dot) org.”
_______________________________________________ discuss mailing list -- discuss@lists.mariadb.org To unsubscribe send an email to discuss-leave@lists.mariadb.org
Hi, Gordan,
mariadb.org has a standard https://mariadb.org/.well-known/security.txt page, that contains:
Contact: https://hackerone.com/mariadb Contact: security@mariadb.org Encryption: https://mariadb.org/security_at_mariadb_org.asc Acknowledgements: https://hackerone.com/mariadb/thanks Policy: https://mariadb.org/about/security-policy/ Signature: https://mariadb.org/.well-known/security.txt.sig Release Packages Signature: https://mariadb.org/mariadb_release_signing_key.asc
In other words, you are advised to use either hackerone or security@mariadb.org email.
Regards, Sergei Chief Architect, MariaDB Server and security@mariadb.org
On Mar 24, Gordan Bobic via discuss wrote:
What is an appropriate forum for discussing what seems to be a security bug that I ran into?
Many thanks.
On Sun, Mar 24, 2024 at 4:35 PM Sergei Golubchik serg@mariadb.org wrote:
Hi, Gordan,
mariadb.org has a standard https://mariadb.org/.well-known/security.txt page, that contains:
Contact: https://hackerone.com/mariadb Contact: security@mariadb.org Encryption: https://mariadb.org/security_at_mariadb_org.asc Acknowledgements: https://hackerone.com/mariadb/thanks Policy: https://mariadb.org/about/security-policy/ Signature: https://mariadb.org/.well-known/security.txt.sig Release Packages Signature: https://mariadb.org/mariadb_release_signing_key.asc
In other words, you are advised to use either hackerone or security@mariadb.org email.
Regards, Sergei Chief Architect, MariaDB Server and security@mariadb.org
On Mar 24, Gordan Bobic via discuss wrote:
What is an appropriate forum for discussing what seems to be a security bug that I ran into?
participants (3)
-
Gordan Bobic -
Sergei Golubchik -
William Edwards