Files
rsync-deployments/SECURITY.md
T
Burnett01 155b6d6c12 Release/9.0.1 (#107)
* feat: upgrade rsync to 3.5.0-r0

Rsync released version 3.5.0 with a ton of CVE fixes.

https://download.samba.org/pub/rsync/NEWS#3.5.0

- CVE-2026-53802 (HIGH)
- CVE-2026-53803 (HIGH)
- CVE-2026-53785 (HIGH)
- CVE-2026-53784 (HIGH)
- CVE-2026-53793 (HIGH)
- CVE-2026-53795 (HIGH)
- CVE-2026-53796 (MEDIUM)
- CVE-2026-53797 (MEDIUM)
- CVE-2026-53799 (MEDIUM)
- CVE-2026-53800 (MEDIUM)
- CVE-2026-53801 (MEDIUM)
- CVE-2026-53783 (HIGH)
- CVE-2026-53786 (MEDIUM)
- CVE-2026-53798 (MEDIUM)
- CVE-2026-53788 (MEDIUM)
- CVE-2026-53789 (MEDIUM)
- CVE-2026-53791 (CRITICAL)
- CVE-2026-53790 (HIGH)
- CVE-2026-53792 (MEDIUM)
- CVE-2026-53794 (MEDIUM)
- CVE-2026-70461 (HIGH)
- CVE-2026-70458 (HIGH)
- CVE-2026-70456 (HIGH)
- CVE-2026-70457 (MEDIUM)
- CVE-2026-70459 (MEDIUM)
- CVE-2026-70464 (HIGH)
- CVE-2026-70455 (HIGH)
- CVE-2026-70453 (HIGH)
- CVE-2026-70452 (HIGH)
- CVE-2026-70463 (HIGH)
- CVE-2026-70460 (HIGH)
- CVE-2026-70462 (MEDIUM)
- CVE-2026-70454 (MEDIUM

* chore: update supported version from 9.0.0 to 9.0.1

* chore: Update README with new rsync and version information
2026-09-04 19:46:02 +02:00

39 lines
1.9 KiB
Markdown

# Security Policy
The Docker image and code quality are regularly checked for vulnerabilities and CVEs by Snyk and CodeQL.
## Supported Versions
The following versions are currently being supported with security updates:
| Version | Supported | Rsync version | Alpine version | Support Until |
| ------- | ------------------ | ------------------ | ------------------ | ------------------ |
| (``v9``) 9.0.1 | :white_check_mark: | >= 3.5.0-r0 | 3.24.1 | LTS (2028-*) |
| 9.0.0 | :white_check_mark: | >= 3.4.3-r1 | 3.24.1 | LTS (2028-*) |
| (``v8``) 8.0.5 | :white_check_mark: | >= 3.4.1-r1 | 3.23.4 | ESU (Apr, 1st 2027) |
| 8.0.4 | :white_check_mark: | >= 3.4.1-r1 | 3.23.3 | Dec, 6th 2026 |
| 8.0.3 | :white_check_mark: | >= 3.4.1-r1 | 3.23.2 | Dec, 6th 2026 |
| 8.0.2 | :white_check_mark: | >= 3.4.1-r1 | 3.23.0 | Dec, 6th 2026 |
| 8.0.1 | :x: EOL | >= 3.4.1-r1 | 3.23.0 | † Apr, 1st 2026 |
| 8.0.0 | :x: EOL (due to regression #90) | >= 3.4.1-r1 | 3.23.0 | † Dec, 6th 2025 |
| 7.1.0 | :x: EOL | >= 3.4.1-r0 | 3.22.1 | † June, 1st 2026 ([deprecation notice](https://github.com/Burnett01/rsync-deployments/discussions/96)) |
| 7.0.2 | :x: EOL | >= 3.4.0-r0 | 3.22.1 | † June, 1st 2026 ([deprecation notice](https://github.com/Burnett01/rsync-deployments/discussions/96)) |
| 7.0.1 | :x: EOL | < 3.4.0 | 3.22.1 | † Dec, 6th 2025 |
| 7.0.0 | :x: EOL | < 3.4.0| 3.19.1 | † Dec, 6th 2025 |
| 6.x | :x: EOL |< 3.4.0| 3.17.2 | † 2024 |
| 5.x | :x: EOL |< 3.4.0| 3.11 - 3.14.1 - 3.15 - 3.16 - 3.17.2 | † 2024 |
| 4.x | :x: EOL |< 3.4.0| 3.11 | † |
| 3.0 | :x: EOL |< 3.4.0| N/A | † |
| 2.0 | :x: EOL |< 3.4.0| Ubuntu | † |
| 1.0 | :x: EOL |< 3.4.0| Ubuntu | † |
### Terminology
EOL = End of life (no support/no updates)
DEPRECATED = Close to EOL (support/no updates)
## Reporting a Vulnerability
You can report a vulnerability by creating an issue.