2021-09-19 06:43:14 -07:00
|
|
|
# Security Policy
|
|
|
|
|
|
|
|
|
|
## Supported Versions
|
|
|
|
|
|
|
|
|
|
We provide security updates for the following releases.
|
|
|
|
|
For more on Spack's release structure, see
|
|
|
|
|
[`README.md`](https://github.com/spack/spack#releases).
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| Version | Supported |
|
|
|
|
|
| ------- | ------------------ |
|
|
|
|
|
| develop | :white_check_mark: |
|
2022-11-11 00:04:26 -08:00
|
|
|
| 0.19.x | :white_check_mark: |
|
|
|
|
|
| 0.18.x | :white_check_mark: |
|
2021-09-19 06:43:14 -07:00
|
|
|
|
|
|
|
|
## Reporting a Vulnerability
|
|
|
|
|
|
|
|
|
|
To report a vulnerability or other security
|
|
|
|
|
issue, email maintainers@spack.io.
|
|
|
|
|
|
|
|
|
|
You can expect to hear back within two days.
|
|
|
|
|
If your security issue is accepted, we will do
|
|
|
|
|
our best to release a fix within a week. If
|
|
|
|
|
fixing the issue will take longer than this,
|
|
|
|
|
we will discuss timeline options with you.
|
