aboutsummaryrefslogtreecommitdiffstats
path: root/contrib/libs/tbb/SECURITY.md
diff options
context:
space:
mode:
authorrobot-contrib <robot-contrib@yandex-team.com>2025-02-26 18:57:26 +0300
committerrobot-contrib <robot-contrib@yandex-team.com>2025-02-26 19:12:07 +0300
commit95821e1fe9a744181bc40019b20bfba422c8bb5c (patch)
tree569d123b3a8b28e86cb8de248dab64242758e1b4 /contrib/libs/tbb/SECURITY.md
parent265f0de28fe709d9205995948ccb52e8cbb80931 (diff)
downloadydb-95821e1fe9a744181bc40019b20bfba422c8bb5c.tar.gz
Update contrib/libs/tbb to 2022.0.0
commit_hash:d60e9d6178eca5f3af92d7e6db92bcd64d0de9cc
Diffstat (limited to 'contrib/libs/tbb/SECURITY.md')
-rw-r--r--contrib/libs/tbb/SECURITY.md69
1 files changed, 64 insertions, 5 deletions
diff --git a/contrib/libs/tbb/SECURITY.md b/contrib/libs/tbb/SECURITY.md
index c4a49dd553..4926041fc2 100644
--- a/contrib/libs/tbb/SECURITY.md
+++ b/contrib/libs/tbb/SECURITY.md
@@ -1,7 +1,66 @@
# Security Policy
-Intel is committed to rapidly addressing security vulnerabilities affecting our customers and providing clear guidance on the solution,
-impact, severity and mitigation.
+As an open-source project, we understand the importance of and responsibility
+for security. This Security Policy outlines our guidelines and procedures to
+ensure the highest level of security and trust for oneTBB users.
-## Reporting a Vulnerability
-Please report any security vulnerabilities in this project
-[utilizing the guidelines here](https://www.intel.com/content/www/us/en/security-center/vulnerability-handling-guidelines.html).
+## Supported Versions
+Security vulnerabilities are fixed in the [latest version][1]
+and delivered as a patch release. We don't guarantee security fixes to be
+back-ported to older oneTBB versions.
+
+## Report a Vulnerability
+We are very grateful to the security researchers and users that report back
+security vulnerabilities. We investigate every report thoroughly.
+We strongly encourage you to report security vulnerabilities to us privately,
+before disclosing them on public forums or opening a public GitHub* issue.
+
+Report a vulnerability to us in one of two ways:
+* Open a draft **[GitHub* Security Advisory][2]**
+* Send an e-mail to: **security@uxlfoundation.org**.
+Along with the report, provide the following info:
+ * A descriptive title.
+ * Your name and affiliation (if any).
+ * A description of the technical details of the vulnerabilities.
+ * A minimal example of the vulnerability so we can reproduce your findings.
+ * An explanation of who can exploit this vulnerability, and what they gain
+ doing so.
+ * Whether this vulnerability is public or known to third parties. If it is,
+ provide details.
+
+### When Should I Report a Vulnerability?
+* You think you discovered a potential security vulnerability in oneTBB.
+* You are unsure how the potential vulnerability affects oneTBB.
+* You think you discovered a vulnerability in another project or 3rd party
+component on which oneTBB depends. If the issue is not fixed in the 3rd party
+component, try to report directly there first.
+
+### When Should I NOT Report a Vulnerability?
+* You got an automated scan hit and are unable to provide details.
+* You need help using oneTBB for security.
+* You need help applying security-related updates.
+* Your issue is not security-related.
+
+## Security Reports Review Process
+We aim to respond quickly to your inquiry and coordinate a fix and
+disclosure with you. All confirmed security vulnerabilities will be addressed
+according to severity level and impact on oneTBB. Normally, security issues
+are fixed in the next planned release.
+
+## Disclosure Policy
+We will publish security advisories using the
+[**GitHub Security Advisories feature**][3]
+to keep our community well-informed, and will credit you for your findings
+unless you prefer to stay anonymous. We request that you refrain from
+exploiting the vulnerability or making it public before the official disclosure.
+
+We will disclose the vulnerabilities and bugs as soon as possible once
+mitigation is implemented and available.
+
+## Feedback on This Policy
+If you have any suggestions on how this Policy could be improved, submit
+an issue or a pull request to this repository. **Do not** report
+potential vulnerabilities or security flaws via a pull request.
+
+[1]: https://github.com/oneapi-src/oneTBB/releases/latest
+[2]: https://github.com/oneapi-src/oneTBB/security/advisories/new
+[3]: https://github.com/oneapi-src/oneTBB/security/advisories