From debe9a51a38029a63566166c90de53471a6f3620 Mon Sep 17 00:00:00 2001 From: Richard Hughes Date: Mon, 25 Apr 2022 15:43:52 +0100 Subject: [PATCH] Make the security policy reflect reality --- SECURITY.md | 27 ++++++++++++++++----------- 1 file changed, 16 insertions(+), 11 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index a09bbd58a..160956654 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -5,8 +5,22 @@ If you have any concerns please let us know. ## Supported Versions -The `1.3.x`, `1.2.x` and `1.1.x` branches are fully supported by the upstream authors. -Additionally, the `1.0.x` branch is supported for security and bug fixes. +The `main`, and `1.7.x`, branches are fully supported by the upstream authors. +Additionally, the `1.5.x` and `1.6.x` branches are supported for security fixes. + +| Version | Supported | +| ------- | ------------------ | +| 1.8.x | :heavy_check_mark: | +| 1.7.x | :heavy_check_mark: | +| 1.6.x | :white_check_mark: | +| 1.5.x | :white_check_mark: | +| 1.4.x | :x: | +| 1.3.x | :x: | +| 1.2.x | :x: | +| 1.1.x | :x: | +| 1.0.x | :x: | +| 0.9.x | :x: | +| 0.8.x | :x: | Older releases than this are unsupported by upstream but may be supported by your distributor or distribution. If you open an issue with one of these older @@ -14,15 +28,6 @@ releases the very first question from us is going to be asking if it's fixed on a supported branch. You can use the flatpak or snap packages if your distributor is unwilling to update to a supported version. -| Version | Supported | -| ------- | ------------------ | -| 1.3.x | :heavy_check_mark: | -| 1.2.x | :heavy_check_mark: | -| 1.1.x | :heavy_check_mark: | -| 1.0.x | :white_check_mark: | -| 0.9.x | :x: | -| 0.8.x | :x: | - ## Reporting a Vulnerability If you find a vulnerability in fwupd your first thing you should do is email