mirror of https://github.com/HandBrake/HandBrake
36 lines
2.2 KiB
Markdown
36 lines
2.2 KiB
Markdown
# Security Policy
|
||
|
||
## Reporting a Vulnerability
|
||
|
||
If you believe you’ve found a security vulnerability in HandBrake or our website (https://handbrake.fr) please use the "Report a vulnerability" button on the [Security Tab](https://github.com/HandBrake/HandBrake/security) above.
|
||
|
||
Contributors to this project are also available in [#handbrake on Libera.chat IRC](https://libera.chat/) (irc://irc.libera.chat:6697/#handbrake).
|
||
Please note, #handbrake and #handbrake-dev are public so details should only be sent to contributors via private message.
|
||
|
||
|
||
## Responsible Disclosure
|
||
|
||
We kindly ask that you use responsible disclosure practices when alerting us to any security related issues.
|
||
This allows us time to investigate and take corrective action where necessary.
|
||
|
||
Our goal is to deal with any issues reported as quickly as possible. If you do not receive a direct response from us within 24 hours, please follow up with us as we may not have received the message.
|
||
|
||
## Policy Notes
|
||
|
||
- HandBrake is a volunteer project and we are not funded. As such, we do not participate in bug bounty programs or pay out for bugs raised.
|
||
- When a new version of HandBrake is released, all prior versions immediately become end-of-life.
|
||
- Releases are ad-hoc and do not follow any set release schedule.
|
||
- Any new releases will be published on our website and here on the [GitHub releases](https://github.com/HandBrake/HandBrake/releases) page. They will also be available via in-app software updates usually within a few days of a release being published.
|
||
- Any security issues will be noted in our [Release Notes](https://github.com/HandBrake/HandBrake/releases), and if relevant an advisory may also be published on our [GitHub Security Page](https://github.com/HandBrake/HandBrake/security).
|
||
- We do NOT fill out any form of questionnaires or provide any security scan results.
|
||
|
||
## Versions
|
||
|
||
We accept bug reports (including security reports) for the following versions:
|
||
|
||
| Version | Accepts Reports |
|
||
| ---------------------- | ------------------ |
|
||
| git main (development) | :white_check_mark: |
|
||
| 1.10.x | :white_check_mark: |
|
||
| Earlier Releases | :x: |
|