SECURITY.md: add file

Add a SECURITY.md file with pointers for developers and security researchers who might report potential security vulnerabilities. Signed-off-by: Ricardo Salveti <[email protected]>
qualcomm-linux · Nov 26, 2024 · 832af4b · 832af4b
1 parent 626d56b
commit 832af4b
Showing 1 changed file with 19 additions and 0 deletions.
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,19 @@
+How to Report a Potential Vulnerability?
+========================================
+
+If you would like to report a public issue (for example, one with a released
+CVE number), please report it as a
+[GitHub issue](https://github.com/quic-yocto/meta-qcom-hwe/issues/new).
+If you have a patch ready, submit it following the same procedure as any other
+patch as described in README.md.
+
+If you are dealing with a not-yet released or urgent issue, please send a
+message to one of the maintainers listed in README.md, including as many details as
+possible: the layer or software module affected, the recipe and its version,
+and any example code, if available.
+
+Branches maintained with security fixes
+---------------------------------------
+
+See https://wiki.yoctoproject.org/wiki/Releases for the list of current
+releases. We only accept patches for the LTS releases and the main branch.