If you"ve found a security issue that you"d like to disclose confidentially please contact Red Hat"s Product Security team. Details at https://access.redhat.com/security/team/contact
Most repositories are licensed under the Apache License, Version 2.0. Some components may be licensed differently - consult individual repositories for more.