Update the security policy

This commit is contained in:
Gerry Demaret 2023-07-18 16:44:29 +02:00
parent 4af23b0ca6
commit fe93668c3b

View file

@ -2,10 +2,20 @@
## Supported Versions
I support only the last published version and the last development version (last commit).
The AdminerEvo team only supports the last published version and the
last development version (last commit).
## Reporting a Vulnerability
To report a vulnerability, create a private bug at https://sourceforge.net/p/adminer/bugs-and-features/new/?private=1.
To report a vulnerability, create a new security advisory
[here](https://github.com/adminerevo/adminerevo/security/advisories).
I handle security issues with top priority. If you don't hear from me in a week then please ping the bug. Once I accept the bug, the fix should be available and new version released within days. I will mark the bug as public after releasing a new version or declining the bug.
Security issues are handled with top priority. Should a report go
unnoticed for more than a week, please send a message in the original
report thread.
Once acknowledged, a fix should be available and a new version
released within a week.
Security advisories will be made public after a fix and new version
have been released, or the advisory has been declined.