Skip to content

Commit

Permalink
Update SECURITY.md (#838)
Browse files Browse the repository at this point in the history
  • Loading branch information
lsh123 committed Aug 30, 2024
1 parent 8628072 commit 97700db
Show file tree
Hide file tree
Showing 2 changed files with 21 additions and 7 deletions.
24 changes: 19 additions & 5 deletions SECURITY.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,11 +5,25 @@
The XMLSec library WILL provide security updates / fixes for the released versions for 5 years since [the day of the release](https://www.aleksey.com/xmlsec/news.html).
After 5 years, the support MIGHT be provided on case-by-case basis.

| Version | Release date | Supported |
| --------- | -------------------|------------------- |
| <= 1.2.28 | April 16, 2019 | :x: |
| >= 1.2.29 | October 15, 2019 | :white_check_mark: |
| >= 1.3.0 | April 12, 2023 | :white_check_mark: |
### 1.3.x (master)

| Component/Version | Version | Release date | Full Support | Security Support |
| ------------------|-----------| -------------------|-----------------------|---------------------|
| xmlsec-core | >= 1.3.0 | April 12, 2023 | :white_check_mark: | :white_check_mark: |
| xmlsec-openssl | >= 1.3.0 | April 12, 2023 | :white_check_mark: | :white_check_mark: |
| xmlsec-nss | >= 1.3.0 | April 12, 2023 | :white_check_mark: | :white_check_mark: |
| xmlsec-gnutls | >= 1.3.0 | April 12, 2023 | :white_check_mark: | :white_check_mark: |
| xmlsec-mscng | >= 1.3.0 | April 12, 2023 | :white_check_mark: | :white_check_mark: |
| xmlsec-gcrypt | >= 1.3.0 | April 12, 2023 | :x: (mainanance mode) | :white_check_mark: |
| xmlsec-mscrypto | >= 1.3.0 | April 12, 2023 | :x: (mainanance mode) | :white_check_mark: |

### 1.2.x (mainanance mode)


| Component/Version | Version | Release date | Full Support | Security Support |
| ------------------|-----------| -------------------|-----------------------|---------------------|
| all | >= 1.2.29 | October 15, 2019 | :x: (mainanance mode) | :white_check_mark: |
| all | <= 1.2.28 | April 16, 2019 | :x: (not supported) | :x: (not supported) |

## Reporting a Vulnerability

Expand Down
4 changes: 2 additions & 2 deletions docs/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -248,7 +248,7 @@ <h1>XML Security Library</h1>
</ul>
</li>
<li>
<b>xmlsec-nss llegacyibrary:</b>
<b>xmlsec-nss library:</b>
<ul>
<li>Added support for <a href="https://www.ietf.org/rfc/rfc9231.html#section-2.3.10">RSA PSS signatures (withtout parameters)</a>.</li>
<li>Added support for <a href="https://www.w3.org/TR/xmlenc-core1/#sec-RSA-OAEP">RSA OAEP key transport including MGF1 algorithms</a>.</li>
Expand Down Expand Up @@ -319,7 +319,7 @@ <h1>XML Security Library</h1>
<li>Added '--transform-binary-chunk-size' option to control transforms binary chunk size (increasing the chunk size should improve performance
at the expense of memory usage.
</li>
<li>Added slegacyupport for loading keys through <a href="https://www.openssl.org/docs/man3.0/man7/ossl_store.html">ossl-store</a> interface (e.g.
<li>Added support for loading keys through <a href="https://www.openssl.org/docs/man3.0/man7/ossl_store.html">ossl-store</a> interface (e.g.
for using keys from an HSM). Also see '--privkey-openssl-store' and '--pubkey-openssl-store ' command line options for XMLSec utility.</li>
<li>Added '--enabled-key-info-reference-uris' option to control processing of the
the <a href="https://www.w3.org/TR/xmldsig-core1/#sec-KeyInfoReference">KeyInfoReference Element</a>.
Expand Down

0 comments on commit 97700db

Please sign in to comment.