Yocto Project Security Reference

Table of Contents

• 1 Security team
  • 1.1 Security team appointment
  • 1.2 Security Team Operations
  • 1.3 What Yocto Security Team does when it receives a security vulnerability
  • 1.4 If an upstream project does not respond quickly
  • 1.5 Security Team Members
• 2 Reporting Vulnerabilities
  • 2.1 How to report a potential security vulnerability?
    • 2.1.1 Branches maintained with security fixes
    • 2.1.2 Security-related discussions at the Yocto Project
    • 2.1.3 What you should do if you find a security vulnerability

---

The Yocto Project ®

<docs@lists.yoctoproject.org>

Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-Share Alike 2.0 UK: England & Wales as published by Creative Commons.

To report any inaccuracies or problems with this (or any other Yocto Project) manual, or to send additions or changes, please send email/patches to the Yocto Project documentation mailing list at docs@lists.yoctoproject.org or log into the Libera Chat #yocto channel.