Security disclosure and reporting for Landscape

See also: Ubuntu Security documentation

Canonical and the Ubuntu Security Team have the following documents which are relevant to Landscape:

• Ubuntu Security’s full security disclosure and embargo policy: This security disclosure applies to any Canonical-authored software.

• CVE reports: This tracks all CVEs that affect Ubuntu.

• Ubuntu Security Notices: This lists all security notices for official Ubuntu packages, which includes Landscape Client.

How to report a security issue

To report a security issue, file a Private Security Report in the corresponding repository or email security@ubuntu.com with a description of the issue, the steps you took to create the issue, affected versions, and, if known, mitigations for the issue.

The Ubuntu Security disclosure and embargo policy contains more information about what you can expect when you contact us and what we expect from you.