Security

Pigweed is committed to delivering reliable, safe, and secure software and tools that can be used to build products with the same characteristics.

Security bulletins

Pigweed encourages its consumers to live at HEAD. Lower severity defects will simply be fixed in the upstream repository without any special notice, so staying up-to-date is the best way to get Pigweed fixes as soon as they are available.

Pigweed includes notices of critical and high severity vulnerabilities and their fixes in monthly security bulletins. These bulletins include the revision that fixes each vulnerability to allow you to cherry-pick the fix if you are not able to stay up-to-date.