Security disclosure and reporting for Landscape
See also: Ubuntu Security documentation
Canonical and the Ubuntu Security Team have the following documents which are relevant to Landscape:
- Ubuntu Security’s full security disclosure and embargo policy: This security disclosure applies to any Canonical-authored software.
- CVE reports: This tracks all CVEs that affect Ubuntu.
- Ubuntu Security Notices: This lists all security notices for official Ubuntu packages, which includes Landscape Client.
How to report a security issue
To report security issues with Landscape, you can follow the guidance in Ubuntu Security’s security disclosure and embargo policy, or you can report a bug to the Landscape team on Launchpad. Launchpad lets you flag a bug as “security”, and you can optionally mark the bug as private.