summaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
Diffstat (limited to 'doc')
-rw-r--r--doc/security.rdoc5
1 files changed, 5 insertions, 0 deletions
diff --git a/doc/security.rdoc b/doc/security.rdoc
index 9f4bca6..2cf6531 100644
--- a/doc/security.rdoc
+++ b/doc/security.rdoc
@@ -10,6 +10,11 @@ Please check the full list of publicly known CVEs and how to correctly report a
security vulnerability, at: http://www.ruby-lang.org/en/security/
Japanese version is here: http://www.ruby-lang.org/ja/security/
+Security vulnerabilities should be reported via an email to
+mailto:security@ruby-lang.org ({the PGP public
+key}[http://www.ruby-lang.org/security.asc]), which is a private mailing list.
+Reported problems will be published after fixes.
+
== <code>$SAFE</code>
Ruby provides a mechanism to restrict what operations can be performed by Ruby