docs/SECURITY.md

   1 ---
   2 title: Reporting of security vulnerabilities
   3 category: Contributing
   4 ---
   5
   6 # Reporting of security vulnerabilities
   7
   8 If you discover a security vulnerability, we'd appreciate a non-public disclosure. The [issue tracker](https://github.com/systemd/systemd/issues) and [systemd-devel mailing list](https://lists.freedesktop.org/mailman/listinfo/systemd-devel) are fully public. If you need to reach systemd developers in a non-public way, report the issue to the [systemd-security@redhat.com](mailto:systemd-security@redhat.com) mailing list. The disclosure will be coordinated with distributions.