ApacheCon is Coming 9-12 Sept. 2019 - Las Vegas The Apache Software Foundation
Apache 20th Anniversary Logo

Celebrating 20 years of community-led development "The Apache Way"

Apache Support Logo

:The Apache Security Team

The Apache Security Team exists to provide help and advice to Apache projects on security issues and to provide co-ordination of the handling of security vulnerabilities. All members of the Security Team are also members of the Apache Software Foundation.

Reporting a vulnerability

We strongly encourage folks to report security vulnerabilities to one of our private security mailing lists first, before disclosing them in a public forum.

A list of security contacts for Apache projects is available. If you can't find a project specific security e-mail address and you have an undisclosed security vulnerability to report then please use the general security address below.

Please note that the security mailing lists should only be used for reporting undisclosed security vulnerabilities in Apache products and managing the process of fixing such vulnerabilities. We cannot accept regular bug reports or other security related queries at these addresses. All mail sent to these addresses that does not relate to an undisclosed security problem in an Apache product will be ignored.

Also note that the security team handles vulnerabilities in Apache products, not running ASF services. All reports of vulnerabilities in running ASF services should be sent to [email protected] only.

The general security mailing list address is: [email protected]. This is a private mailing list and only members of the Apache Security Team are subscribed.

Please describe your vulnerability report using plain text. We may ask you to resubmit your report if you send it as an image, movie, or PDF attachment when it could just as easily be described in plain text format.

Please note that we do not use a team OpenPGP key. If you wish to encrypt your e-mail to [email protected] then please use the OpenPGP keys of the following subset of members of the Apache Security Team and be aware that it may take us a little longer to respond to the issue. Note that this is not a complete list of Apache Security Team members and that you should not contact these members individually about security issues.

The keys for all of the above can also be obtained in a single file from The Apache Software Foundation.

Vulnerability Information

Information on the published vulnerabilities for an Apache project can usually be found on the project's web pages. For convenience a list of security information pages for Apache projects is available. If you can't find the information you are looking for on the project's web site, you should ask your question on the project's user mailing list. The security lists should not be used to ask questions about :

The relevant project's users list is the place to ask such questions. Any such questions sent to the Apache Security Team or to a project security team will be ignored.

Vulnerability handling

An overview of the vulnerability handling process is:

A more detailed description of the process has been written for committers. Reporters of security vulnerabilities may also find it useful.

前三组走势图 辽宁十一选五走势图一定牛 时时彩开奖app哪个好 安徽十一选五走势一定牛 2009开奖记录完整版 广东十一选五免费预测 抓码王高手论坛381381 河南22选5预测最准确人 黑龙江时时漏洞 吉林时时彩开奖开奖结果查询 2018香港马会资枓大全历史 体彩十一选五下载官网 2019够力七星奖表下载 顺盈彩票下载 广西体彩官网 快乐扑克3开奖直播