From 86eecc11018e902bb9980e6e0beecd8b2613281b Mon Sep 17 00:00:00 2001 From: Oleksandra Pavlusieva Date: Tue, 21 Feb 2023 14:27:59 +0200 Subject: [PATCH 1/3] Create SECURITY.md --- SECURITY.md | 38 ++++++++++++++++++++++++++++++++++++++ 1 file changed, 38 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..fb23841 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,38 @@ +# Reporting security vulnerabilities + +Oracle values the independent security research community and believes that +responsible disclosure of security vulnerabilities helps us ensure the security +and privacy of all our users. + +Please do NOT raise a GitHub Issue to report a security vulnerability. If you +believe you have found a security vulnerability, please submit a report to +[secalert_us@oracle.com][1] preferably with a proof of concept. Please review +some additional information on [how to report security vulnerabilities to Oracle][2]. +We encourage people who contact Oracle Security to use email encryption using +[our encryption key][3]. + +We ask that you do not use other channels or contact the project maintainers +directly. + +Non-vulnerability related security issues including ideas for new or improved +security features are welcome on GitHub Issues. + +## Security updates, alerts and bulletins + +Security updates will be released on a regular cadence. Many of our projects +will typically release security fixes in conjunction with the +[Oracle Critical Patch Update][3] program. Additional +information, including past advisories, is available on our [security alerts][4] +page. + +## Security-related information + +We will provide security related information such as a threat model, considerations +for secure use, or any known security issues in our documentation. Please note +that labs and sample code are intended to demonstrate a concept and may not be +sufficiently hardened for production use. + +[1]: mailto:secalert_us@oracle.com +[2]: https://www.oracle.com/corporate/security-practices/assurance/vulnerability/reporting.html +[3]: https://www.oracle.com/security-alerts/encryptionkey.html +[4]: https://www.oracle.com/security-alerts/ From 5f4ff69803dfa673b60d81c3fc903cf329f0bc0d Mon Sep 17 00:00:00 2001 From: Oleksandra Pavlusieva Date: Tue, 21 Feb 2023 14:35:59 +0200 Subject: [PATCH 2/3] Update README.md --- README.md | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index fb87140..da3c5fe 100644 --- a/README.md +++ b/README.md @@ -37,7 +37,16 @@ Font APEX is also well suited for bi-directional languages. Icons with arrows, s You can see all of the Font APEX icons on the [Oracle APEX - Universal Theme Sample Application](https://apex.oracle.com/fontapex). -# License +## Contributing + +This project is not accepting external contributions at this time. For bugs or enhancement requests, please file a GitHub issue unless it’s security related. When filing a bug remember that the better written the bug is, the more likely it is to be fixed. If you think you’ve found a security vulnerability, do not raise a GitHub issue and follow the instructions in our [security policy](./SECURITY.md). + +## Security + +Please consult the [security guide](./SECURITY.md) for our responsible security vulnerability disclosure process + +## License + Fonts: SIL OFL 1.1 License (https://scripts.sil.org/OFL) Icons + Code: MIT License (https://opensource.org/licenses/MIT) From 0ef0d3f518f747c47afd5314d8df72664c6b7202 Mon Sep 17 00:00:00 2001 From: Lesia Chaban Date: Fri, 8 Mar 2024 14:46:00 +0200 Subject: [PATCH 3/3] Update LICENSE.txt --- LICENSE.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/LICENSE.txt b/LICENSE.txt index 3f248f9..d5995d9 100644 --- a/LICENSE.txt +++ b/LICENSE.txt @@ -39,7 +39,7 @@ copyright statement(s). distributed by the Copyright Holder(s). "Modified Version" refers to any derivative made by adding to, deleting, -or substituting — in part or in whole — any of the components of the +or substituting - in part or in whole - any of the components of the Original Version, by changing formats or by porting the Font Software to a new environment. @@ -114,4 +114,4 @@ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN -THE SOFTWARE. \ No newline at end of file +THE SOFTWARE.