Files
rsync-deployments/SECURITY.md
T
Burnett01 66257cad6b Release/8.0.5 (#101)
* feat: Update base image to Alpine 3.23.4

Alpine 3.23.4 fixes the following:

musl
CVE-2026-6042
CVE-2026-40200

openssl
CVE-2026-31790
CVE-2026-28387
CVE-2026-28388
CVE-2026-28389
CVE-2026-28390
CVE-2026-31789

* chore: Update supported versions in SECURITY.md

* chore: Update README for Alpine and version changes

* chore: Update copyright years in LICENSE file

Updated copyright years for Joshua Piper and Burnett01.
2026-04-17 18:50:35 +02:00

1.8 KiB

Security Policy

The Docker image and code quality are regularly checked for vulnerabilities and CVEs by Snyk and CodeQL.

Supported Versions

The following versions are currently being supported with security updates:

Version Supported Rsync version Alpine version Support Until
(v8) 8.0.5 >= 3.4.1-r1 3.23.4 LTS (2026-*)
8.0.4 >= 3.4.1-r1 3.23.3 LTS (2026)
8.0.3 >= 3.4.1-r1 3.23.2 LTS (2026)
8.0.2 >= 3.4.1-r1 3.23.0 LTS (2026)
8.0.1 EOL >= 3.4.1-r1 3.23.0 † Apr, 1st 2026
8.0.0 EOL (due to regression #90) >= 3.4.1-r1 3.23.0 † Dec, 6th 2025
7.1.0 ⚠️ DEPRECATED >= 3.4.1-r0 3.22.1 June, 1st 2026 (deprecation notice)
7.0.2 ⚠️ DEPRECATED >= 3.4.0-r0 3.22.1 June, 1st 2026 (deprecation notice)
7.0.1 EOL < 3.4.0 3.22.1 † Dec, 6th 2025
7.0.0 EOL < 3.4.0 3.19.1 † Dec, 6th 2025
6.x EOL < 3.4.0 3.17.2 † 2024
5.x EOL < 3.4.0 3.11 - 3.14.1 - 3.15 - 3.16 - 3.17.2 † 2024
4.x EOL < 3.4.0 3.11
3.0 EOL < 3.4.0 N/A
2.0 EOL < 3.4.0 Ubuntu
1.0 EOL < 3.4.0 Ubuntu

Terminology

EOL = End of life (no support/no updates)

DEPRECATED = Close to EOL (support/no updates)

Reporting a Vulnerability

You can report a vulnerability by creating an issue.