Welcome to the Open Source Software Security Wiki. This wiki provides information on a variety of open source security resources and “best practices” information. It is also the counterpart to the oss-security mailing list. Please note that registration on this wiki is distinct from mailing list subscription; you're not automatically subscribed when you register on the wiki.

The following is a list of resources available on this wiki:

• Tips for Disclosing Security Flaws
• Security-related mailing lists
• Security-related vendor information, such as links to bug trackers, security contacts, etc.
• Security-related open source software information, such as links to bug trackers, security contacts, etc.
• Security-related open source infrastructure information, such as links to security contacts, etc.
• Finding Distro Patches
• A repository of code reviews and patches for open source projects
• Tools for uncovering security vulnerabilities and performing code reviews
• Development Guide, a guide of best practices for securely developing an OSS project
• Links to other security-related websites
• Background on some exploit mitigation techniques

You can also use the “Index” button at the bottom of any wiki page (or press Ctrl-X if your browser supports it) to get a list of all available wiki pages.

If you experience any problems with this wiki setup (e.g., with new user registration or content editing), or have suggestions on improving it, please contact us at wikiadmin [at] oss [dash] security [dot] openwall [dot] org.