mirror of https://github.com/ctz/rustls
Limit scope of security support based on time
This commit is contained in:
parent
913430247c
commit
0b86e5e6f4
11
SECURITY.md
11
SECURITY.md
|
@ -2,7 +2,16 @@
|
|||
|
||||
## Supported Versions
|
||||
|
||||
Security fixes will be backported to the most recent three minor version lines.
|
||||
Security fixes will be backported only to the rustls versions for which the
|
||||
original semver-compatible release was published less than 2 years ago.
|
||||
|
||||
For example, as of 2023-06-13 the latest release is 0.21.1.
|
||||
|
||||
* 0.21.0 was released in March of 2023
|
||||
* 0.20.0 was released in September of 2021
|
||||
* 0.19.0 was released in November of 2020
|
||||
|
||||
Therefore 0.20.x and 0.21.x will be updated, while 0.19.x will not be.
|
||||
|
||||
## Reporting a Vulnerability
|
||||
|
||||
|
|
Loading…
Reference in New Issue