Files
rsync-deployments/SECURITY.md
T
Burnett01 2cbb5ed94b Release/9.0.2 (#113)
Alpine and Rsync have received new updates:

* feat: Update Alpine from 3.24.1 to 3.24.2

Release notes: https://alpinelinux.org/posts/Alpine-3.21.8-3.22.6-3.23.6-3.24.2-released.html

* feat: Update Rsync from 3.5.0 to 3.5.1

Release notes: https://download.samba.org/pub/rsync/NEWS#3.5.1

* feat: install rsync from Alpine edge branch for latest security patches when base branch lacks behind

* chore: Update supported versions in SECURITY.md

* feat: add integration workflow for tests

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-14 17:49:45 +02:00

2.0 KiB

Security Policy

The Docker image and code quality are regularly checked for vulnerabilities and CVEs by Snyk and CodeQL.

Supported Versions

The following versions are currently being supported with security updates:

Version Supported Rsync version Alpine version Support Until
(v9) 9.0.2 ✅ >= 3.5.1-r0 3.24.2 LTS (2028-*)
9.0.1 ✅ >= 3.5.0-r0 3.24.1 LTS (2028-*)
9.0.0 ✅ >= 3.4.3-r1 3.24.1 LTS (2028-*)
(v8) 8.0.5 ✅ >= 3.4.1-r1 3.23.4 ESU (Apr, 1st 2027)
8.0.4 ⚠️ DEPRECATED >= 3.4.1-r1 3.23.3 Dec, 6th 2026
8.0.3 ⚠️ DEPRECATED >= 3.4.1-r1 3.23.2 Dec, 6th 2026
8.0.2 ⚠️ DEPRECATED >= 3.4.1-r1 3.23.0 Dec, 6th 2026
8.0.1 ❌ EOL >= 3.4.1-r1 3.23.0 † Apr, 1st 2026
8.0.0 ❌ EOL (due to regression #90) >= 3.4.1-r1 3.23.0 † Dec, 6th 2025
7.1.0 ❌ EOL >= 3.4.1-r0 3.22.1 † June, 1st 2026 (deprecation notice)
7.0.2 ❌ EOL >= 3.4.0-r0 3.22.1 † June, 1st 2026 (deprecation notice)
7.0.1 ❌ EOL < 3.4.0 3.22.1 † Dec, 6th 2025
7.0.0 ❌ EOL < 3.4.0 3.19.1 † Dec, 6th 2025
6.x ❌ EOL < 3.4.0 3.17.2 † 2024
5.x ❌ EOL < 3.4.0 3.11 - 3.14.1 - 3.15 - 3.16 - 3.17.2 † 2024
4.x ❌ EOL < 3.4.0 3.11 †
3.0 ❌ EOL < 3.4.0 N/A †
2.0 ❌ EOL < 3.4.0 Ubuntu †
1.0 ❌ EOL < 3.4.0 Ubuntu †

Terminology

EOL = End of life (no support/no updates)

DEPRECATED = Close to EOL (support/no updates)

Reporting a Vulnerability

You can report a vulnerability by creating an issue.