Make the security policy reflect reality

This commit is contained in:
Richard Hughes 2022-04-25 15:43:52 +01:00
parent 31907e6863
commit debe9a51a3

View File

@ -5,8 +5,22 @@ If you have any concerns please let us know.
## Supported Versions ## Supported Versions
The `1.3.x`, `1.2.x` and `1.1.x` branches are fully supported by the upstream authors. The `main`, and `1.7.x`, branches are fully supported by the upstream authors.
Additionally, the `1.0.x` branch is supported for security and bug fixes. Additionally, the `1.5.x` and `1.6.x` branches are supported for security fixes.
| Version | Supported |
| ------- | ------------------ |
| 1.8.x | :heavy_check_mark: |
| 1.7.x | :heavy_check_mark: |
| 1.6.x | :white_check_mark: |
| 1.5.x | :white_check_mark: |
| 1.4.x | :x: |
| 1.3.x | :x: |
| 1.2.x | :x: |
| 1.1.x | :x: |
| 1.0.x | :x: |
| 0.9.x | :x: |
| 0.8.x | :x: |
Older releases than this are unsupported by upstream but may be supported by Older releases than this are unsupported by upstream but may be supported by
your distributor or distribution. If you open an issue with one of these older your distributor or distribution. If you open an issue with one of these older
@ -14,15 +28,6 @@ releases the very first question from us is going to be asking if it's fixed on
a supported branch. You can use the flatpak or snap packages if your distributor a supported branch. You can use the flatpak or snap packages if your distributor
is unwilling to update to a supported version. is unwilling to update to a supported version.
| Version | Supported |
| ------- | ------------------ |
| 1.3.x | :heavy_check_mark: |
| 1.2.x | :heavy_check_mark: |
| 1.1.x | :heavy_check_mark: |
| 1.0.x | :white_check_mark: |
| 0.9.x | :x: |
| 0.8.x | :x: |
## Reporting a Vulnerability ## Reporting a Vulnerability
If you find a vulnerability in fwupd your first thing you should do is email If you find a vulnerability in fwupd your first thing you should do is email