We support security updates on the most recent release and current nightly snapshots. We will work with distributions (e.g., Ubuntu, FreeBSD, etc.) to provide security patches for widely used long-term-support OS.

Going forward, we will indicate particular releases for long-term-support, although we intend to keep to a frequent release schedule.

We currently support private security vulnerability reporting through our GitHub pages. We will work to verify the security vulnerability within 14 days and a patch or new release within 30 days of reporting.