docs: say that the github form is preferred for security vulnerabilities

This commit is contained in:
Zbigniew Jędrzejewski-Szmek
2026-06-01 15:06:20 +01:00
committed by Luca Boccassi
parent ea84aa0ce2
commit 84389ff656
+2 -2
View File
@@ -8,8 +8,8 @@ SPDX-License-Identifier: LGPL-2.1-or-later
# Reporting of Security Vulnerabilities
If you discover a security vulnerability, we'd appreciate a non-public disclosure.
systemd developers can be contacted privately by creating a new **[Security Advisory on GitHub](https://github.com/systemd/systemd/security/advisories/new)**
or via the **[systemd-security@redhat.com](mailto:systemd-security@redhat.com) mailing list**.
systemd developers can be contacted privately by creating a new **[Security Advisory on GitHub](https://github.com/systemd/systemd/security/advisories/new)** (preferred)
or via the [systemd-security@redhat.com](mailto:systemd-security@redhat.com) mailing list.
The disclosure will be coordinated with distributions.
(The [issue tracker](https://github.com/systemd/systemd/issues) and [systemd-devel mailing list](https://lists.freedesktop.org/mailman/listinfo/systemd-devel) are fully public.)