xref: /freebsd/contrib/unbound/SECURITY.md (revision 790c6b245151d6d5a26b84e5f34fee61453e2e60)
1*790c6b24SCy Schubert# Security Policy
2*790c6b24SCy Schubert
3*790c6b24SCy Schubert## Supported Versions
4*790c6b24SCy Schubert
5*790c6b24SCy SchubertNLnet Labs adheres to the straightforward, semantic versioning scheme that is
6*790c6b24SCy Schubertcommonly used in the software industry.
7*790c6b24SCy Schubert
8*790c6b24SCy SchubertSupport is provided in respect of the latest release, i.e. releases with the
9*790c6b24SCy Schuberthighest minor and patch version level. We do not backport security fixes to
10*790c6b24SCy Schubertolder (minor) versions. In the event a new major version is released (e.g.  from
11*790c6b24SCy Schubert3.2.18 to 4.0.0), support will also be provided on the latest minor  version of
12*790c6b24SCy Schubertthe previous major version (3.2.18) for a period of one year from the release of
13*790c6b24SCy Schubertthe new major version (4.0.0).
14*790c6b24SCy Schubert
15*790c6b24SCy SchubertIn the event that, during this period, a new patch or minor version of the
16*790c6b24SCy Schubertprevious major version is released, then support on these versions will only be
17*790c6b24SCy Schubertprovided for the remainder of the one-year-period.
18*790c6b24SCy Schubert
19*790c6b24SCy SchubertYou can find detailed information on our software support policy here:
20*790c6b24SCy Schubert
21*790c6b24SCy Schuberthttps://www.nlnetlabs.nl/support/software-support-policy/
22*790c6b24SCy Schubert
23*790c6b24SCy Schubert## Reporting a Vulnerability
24*790c6b24SCy Schubert
25*790c6b24SCy SchubertWe take security very seriously. If you have discovered a security vulnerability
26*790c6b24SCy Schubertin one of our projects and you would like to report it to us, you can send an
27*790c6b24SCy Schubertencrypted message to our Security Entry Point.
28*790c6b24SCy Schubert
29*790c6b24SCy SchubertDetails are described here:
30*790c6b24SCy Schubert
31*790c6b24SCy Schuberthttps://www.nlnetlabs.nl/security-report/
32