diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000..3b0257f2 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,27 @@ +# Security + +## Supported Versions + +| Version | Supported | +| ------------------------ | ------------------ | +| HEAD of master | :white_check_mark: | +| Latest released revision | :white_check_mark: | +| All old revisions | :x: | + +Flood does NOT provide LTS support. Older revisions are deprecated as soon as a newer revision is released. + +Generally only the latest revision (`HEAD of master`) is supported. However, [issue tracker](https://github.com/jesec/flood/issues) is still open to reports from users of the `Latest released revision`. In rare circumstances, if there is a vulnerability that requires urgent attention, and, if the `HEAD of master` is occupied with changes which maintainers are not comfortable to release, relevant changes may be backported to the `Latest released revision` to release a patch revision. + +You are advised to upgrade to the latest release as soon as possible. + +## Reporting a Vulnerability + +If you discover a security vulnerability within Flood, please send an e-mail to maintainer. + +Suggestions for general security enhancements and/or mitigations shall be reported to [issue tracker](https://github.com/jesec/flood/issues). + +If you are unsure about the severity, send an email first. + +## More information + +Check out the [Wiki](https://github.com/jesec/flood/wiki) for more information.