Reporting Security Issues
=========================

If you would like to report a public issue (for example, one with a released CVE number), please report it using the [opkg bugzilla tracker](https://bugzilla.yoctoproject.org/buglist.cgi?quicksearch=Product%3Aopkg).

If you have a patch ready, submit it following the same procedure as any other patch as described in [CONTRIBUTING.md](https://git.yoctoproject.org/opkg/tree/docs/CONTRIBUTING.md).

If you are reporting an unreleased or urgent issue, please send an email directly to the project maintainer: <alex.stewart@emerson.com>. Be sure to include all the details you can about reproducing or exploiting the issue.
