Files
euri-packages/SECURITY.md
T

1.1 KiB

Security Policy

Supported Versions

Only the latest builds in the Euri Linux package repository receive security updates. There are no LTS releases.

Version Supported
latest (rolling)

Reporting a Vulnerability

Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.

Instead, report via GitHub Private Vulnerability Reporting for this repository. If that's unavailable, email ash8820@proton.me.

When reporting, include:

  • The affected package name and version
  • A description of the issue and why it's security-sensitive
  • Steps to reproduce or a proof of concept
  • Any relevant logs, payloads, or screenshots
  • The potential impact
  • Suggested mitigations or fixes, if known

You can expect an acknowledgment within 3 business days. After assessment, I'll work on a fix and coordinate disclosure timing when appropriate.

Scope

This covers the PKGBUILDs and supporting files in this repo (packaging logic, dependency handling, distribution of upstream software). Issues in upstream software itself should be reported to the respective upstream project.