[libgit2.git] / SECURITY.md

# Security Policy

## Supported Versions

This project will always provide security fixes for the latest two released
versions. E.g. if the latest version is v0.28.x, then we will provide security
fixes for both v0.28.x and v0.27.y, but no later versions.

## Reporting a Vulnerability

In case you think to have found a security issue with libgit2, please do not
open a public issue.  Instead, you can report the issue to the private mailing
list [security@libgit2.com](mailto:security@libgit2.com). We will acknowledge
receipt of your message in at most three days and try to clarify further steps.
Commit	Line	Data
0c9c969a UG	1	# Security Policy
	2
	3	## Supported Versions
	4
	5	This project will always provide security fixes for the latest two released
	6	versions. E.g. if the latest version is v0.28.x, then we will provide security
	7	fixes for both v0.28.x and v0.27.y, but no later versions.
	8
	9	## Reporting a Vulnerability
	10
	11	In case you think to have found a security issue with libgit2, please do not
	12	open a public issue. Instead, you can report the issue to the private mailing
	13	list [security@libgit2.com](mailto:security@libgit2.com). We will acknowledge
	14	receipt of your message in at most three days and try to clarify further steps.