]> jfr.im git - irc/unrealircd/unrealircd.git/blob - SECURITY.md
Don't put insecure gatewayed/proxied connections in 'tls-users' security group.
[irc/unrealircd/unrealircd.git] / SECURITY.md
1 # Security Policy
2
3 ## Supported Versions
4 * The latest *stable* release of UnrealIRCd 6
5
6 See [UnrealIRCd releases](https://www.unrealircd.org/docs/UnrealIRCd_releases) for information on older versions and End Of Life dates.
7
8 ## Reporting a Vulnerability
9
10 Please report issues on the [bug tracker](https://bugs.unrealircd.org) and in the bug submit form **set the 'View Status' to 'private'**.
11
12 Do not report security issues on the forums or in a public IRC channel such as #unreal-support.
13 If you insist on e-mail then you can use syzop@unrealircd.org or security@unrealircd.org. Again, the bug tracker is preferred.
14
15 If you are *unsure* if something is a security issue, then report it at the bug tracker as a 'private' bug anyway. Better safe than sorry.
16 Do not ask around in public channels or forums.
17
18 You should get a response or at least an acknowledgement soon. If you don't hear back within 24 hours, then please try to contact us again.
19
20 ## Full policy
21 See https://www.unrealircd.org/docs/Policy:_Handling_of_security_issues for full information.