srsRAN_4G icon indicating copy to clipboard operation
srsRAN_4G copied to clipboard

How to submit security issues?

Open takubokudori opened this issue 3 years ago • 3 comments
trafficstars

I've found multiple security issues on srsRAN, but there is no guideline about how to submit security issues in this repository. Could you please tell me how to submit these?

takubokudori avatar Sep 20 '22 03:09 takubokudori

Hey @takubokudori, thanks for getting in touch. We don't have a dedicated security process in place but that's something we will add in the future. Meanwhile, please feel free to send your findings to [email protected] and we'll review them.

andrepuschmann avatar Sep 20 '22 07:09 andrepuschmann

@andrepuschmann

Thank you for the reply. I've sent an e-mail to [email protected]. Could you please check the e-mail box?

takubokudori avatar Sep 20 '22 09:09 takubokudori

We've received your mail. Thanks for the input

andrepuschmann avatar Sep 20 '22 11:09 andrepuschmann

For reference, we've also added a subsection under https://docs.srsran.com/en/latest/reporting_issues.html that explains the submission process for potential security issues. Thanks again for your contribution and pointing that out.

andrepuschmann avatar Nov 07 '22 13:11 andrepuschmann