Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update SECURITY.md #838

Merged
merged 2 commits into from
Aug 8, 2024
Merged

Update SECURITY.md #838

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
275d1c1
Update SECURITY.md
lsh123 Aug 8, 2024
e92505f
Update index.html
lsh123 Aug 8, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
24 changes: 19 additions & 5 deletions SECURITY.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,11 +5,25 @@
The XMLSec library WILL provide security updates / fixes for the released versions for 5 years since [the day of the release](https://www.aleksey.com/xmlsec/news.html).
After 5 years, the support MIGHT be provided on case-by-case basis.

| Version | Release date | Supported |
| --------- | -------------------|------------------- |
| <= 1.2.28 | April 16, 2019 | :x: |
| >= 1.2.29 | October 15, 2019 | :white_check_mark: |
| >= 1.3.0 | April 12, 2023 | :white_check_mark: |
### 1.3.x (master)

| Component/Version | Version | Release date | Full Support | Security Support |
| ------------------|-----------| -------------------|-----------------------|---------------------|
| xmlsec-core | >= 1.3.0 | April 12, 2023 | :white_check_mark: | :white_check_mark: |
| xmlsec-openssl | >= 1.3.0 | April 12, 2023 | :white_check_mark: | :white_check_mark: |
| xmlsec-nss | >= 1.3.0 | April 12, 2023 | :white_check_mark: | :white_check_mark: |
| xmlsec-gnutls | >= 1.3.0 | April 12, 2023 | :white_check_mark: | :white_check_mark: |
| xmlsec-mscng | >= 1.3.0 | April 12, 2023 | :white_check_mark: | :white_check_mark: |
| xmlsec-gcrypt | >= 1.3.0 | April 12, 2023 | :x: (mainanance mode) | :white_check_mark: |
| xmlsec-mscrypto | >= 1.3.0 | April 12, 2023 | :x: (mainanance mode) | :white_check_mark: |

### 1.2.x (mainanance mode)


| Component/Version | Version | Release date | Full Support | Security Support |
| ------------------|-----------| -------------------|-----------------------|---------------------|
| all | >= 1.2.29 | October 15, 2019 | :x: (mainanance mode) | :white_check_mark: |
| all | <= 1.2.28 | April 16, 2019 | :x: (not supported) | :x: (not supported) |

## Reporting a Vulnerability

Expand Down
4 changes: 2 additions & 2 deletions docs/index.html
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -248,7 +248,7 @@ <h1>XML Security Library</h1>
</ul>
</li>
<li>
<b>xmlsec-nss llegacyibrary:</b>
<b>xmlsec-nss library:</b>
<ul>
<li>Added support for <a href="https://www.ietf.org/rfc/rfc9231.html#section-2.3.10">RSA PSS signatures (withtout parameters)</a>.</li>
<li>Added support for <a href="https://www.w3.org/TR/xmlenc-core1/#sec-RSA-OAEP">RSA OAEP key transport including MGF1 algorithms</a>.</li>
Expand Down Expand Up @@ -319,7 +319,7 @@ <h1>XML Security Library</h1>
<li>Added '--transform-binary-chunk-size' option to control transforms binary chunk size (increasing the chunk size should improve performance
at the expense of memory usage.
</li>
<li>Added slegacyupport for loading keys through <a href="https://www.openssl.org/docs/man3.0/man7/ossl_store.html">ossl-store</a> interface (e.g.
<li>Added support for loading keys through <a href="https://www.openssl.org/docs/man3.0/man7/ossl_store.html">ossl-store</a> interface (e.g.
for using keys from an HSM). Also see '--privkey-openssl-store' and '--pubkey-openssl-store ' command line options for XMLSec utility.</li>
<li>Added '--enabled-key-info-reference-uris' option to control processing of the
the <a href="https://www.w3.org/TR/xmldsig-core1/#sec-KeyInfoReference">KeyInfoReference Element</a>.
Expand Down
Loading