From 7112a4d9e67927f9fca408da2ef332c88935030d Mon Sep 17 00:00:00 2001 From: Patrik Oldsberg Date: Fri, 1 Mar 2024 15:03:55 +0100 Subject: [PATCH] docs/overview/versioning-policy: commit to backporting high and critical vulnerabilities Signed-off-by: Patrik Oldsberg --- docs/overview/versioning-policy.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/docs/overview/versioning-policy.md b/docs/overview/versioning-policy.md index 8b12138499..0b1bc975bd 100644 --- a/docs/overview/versioning-policy.md +++ b/docs/overview/versioning-policy.md @@ -68,7 +68,9 @@ The following versioning policy applies to the main-line releases only. done when necessary and with the goal of having minimal impact. When possible, there will always be a deprecation path for a breaking change. - Security fixes **may** be backported to older releases based on the simplicity - of the upgrade path, and the severity of the vulnerability. + of the upgrade path, and the severity of the vulnerability. Vulnerabilities + with a severity of `high` or `critical` will always be backported to releases + for the last 6 months if feasible. - Bug reports are valid only if reproducible in the most recent release, and bug fixes are only applied to the next release. - We will do our best to adhere to this policy.