github.com_burnett01_rsync-.../SECURITY.md
Steven 7659d600d8
feat(release): 8.0.3 (v8) - bump alpine from 3.23.0 to 3.23.2 (#97) (#98)
* chore(deps): bump alpine from 3.23.0 to 3.23.2

Bumps alpine from 3.23.0 to 3.23.2.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.23.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...



* chore(docs): update Alpine version to 3.23.2 in README and SECURITY files

* chore(docs): update current version to 8.0.3 in README

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-02 21:55:43 +01:00

1.6 KiB

Security Policy

The Docker image and code quality are regularly checked for vulnerabilities and CVEs by Snyk and CodeQL.

Supported Versions

The following versions are currently being supported with security updates:

Version Supported Rsync version Alpine version Support Until
(v8) 8.0.3 >= 3.4.1-r1 3.23.2 LTS (2026-*)
8.0.2 >= 3.4.1-r1 3.23.0 LTS (2026-*)
8.0.1 >= 3.4.1-r1 3.23.0 Apr, 1st 2026
8.0.0 EOL (due to regression #90) >= 3.4.1-r1 3.23.0 † Dec, 6th 2025
7.1.0 ⚠️ DEPRECATED >= 3.4.1-r0 3.22.1 June, 1st 2026 (deprecation notice)
7.0.2 ⚠️ DEPRECATED >= 3.4.0-r0 3.22.1 June, 1st 2026 (deprecation notice)
7.0.1 EOL < 3.4.0 3.22.1 † Dec, 6th 2025
7.0.0 EOL < 3.4.0 3.19.1 † Dec, 6th 2025
6.x EOL < 3.4.0 3.17.2 † 2024
5.x EOL < 3.4.0 3.11 - 3.14.1 - 3.15 - 3.16 - 3.17.2 † 2024
4.x EOL < 3.4.0 3.11
3.0 EOL < 3.4.0 N/A
2.0 EOL < 3.4.0 Ubuntu
1.0 EOL < 3.4.0 Ubuntu

Terminology

EOL = End of life (no support/no updates)

DEPRECATED = Close to EOL (support/no updates)

Reporting a Vulnerability

You can report a vulnerability by creating an issue.