Who send reports on vulnerabilities to?


If you think you have found a security problem in a software package or operating system, you can contact us directly. We will progress your report to the appropriate address(es).

You can also send your report directly to the security services of the different manufacturers.

You can find more information at our page on security per operating system.

Package or system
Report to
Apache security@apache.org
Apple MacOS / Rhapsodyhttp://devworld.apple.com/bugreporter
Digitalrich.boren@cxo.mts.dec.com
FreeBSDsecurity-officer@freebsd.org
Hewlett Packardsecurity-alert@hp.com
IBMsecurity-alert@austin.ibm.com
Microsoftsecure@microsoft.com
NetBSDsecurity-officer@netbsd.org
OpenBSDderaadt@openbsd.org
RedHat Linuxbugs@redhat.com
Linux-Mandrakesecurity@linux-mandrake.com
SCOsecurity-alert@sgi.com
Sunsecurity-alert@sun.com
BSDIproblems@bsdi.org