Debian Security Team

buster 10	bullseye 11	bookworm 12	sid
buster-security	bullseye-security	testing	unstable
Vulnerable Packages	Vulnerable Packages	Vulnerable Packages	Vulnerable Packages
Next (oldstable) point update	Next point update	Next point update	Next point update

Security team documentation

This is more a TODO list than an index. For now. Please, feel free to contribute with this document.

• Organization
  • How to contribute with the security team
• How to interact with the security team
  • As a vulnerability reporter
    • public issues
    • private issues (embargo)
  • As a package maintainer
    • DSA vulnerability
    • SPU vulnerability
    • Just unstable
  • As an upstream? (embargo issues? backporting patches?)
• Internal tasks tasks
  • DSA release
• How to interact with the Security Tracker
  • How to contribute to the security tracker code
• Triage "low severity" issues
• Troubleshooting tips
• Glossary