Skip to content

Security: canonical/craft-parts

Security

Report a vulnerability

SECURITY.md

Security policy

Release cycle

Canonical tracks and responds to vulnerabilities in:

  • The most recent patch version of Craft Parts.
  • Any version of Craft Parts that's included in a current release of a Canonical product.

Reporting a vulnerability

To report a security issue, file a Private Security Report with a description of the issue, the steps you took to create the issue, affected versions, and, if known, mitigations for the issue.

The Ubuntu Security disclosure and embargo policy contains more information about what you can expect when you contact us and what we expect from you.

There aren’t any published security advisories