From 20437ef2c777864b154c35a8122919459584f40e Mon Sep 17 00:00:00 2001 From: Doug Burks Date: Mon, 14 Jun 2021 15:42:18 -0400 Subject: [PATCH] Create SECURITY.md --- SECURITY.md | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 000000000..46ae8090c --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,21 @@ +# Security Policy + +## Supported Versions + +| Version | Supported | +| ------- | ------------------ | +| 2.x.x | :white_check_mark: | +| 16.04.x | :x: | + +Security Onion 16.04 has reached End Of Life and is no longer supported. + +## Reporting a Vulnerability + +If you have any security concerns regarding Security Onion or believe you have uncovered a vulnerability, please follow these steps: + +- send an email to security@securityonion.net +- include a description of the issue and steps to reproduce +- please use plain text format (no Word documents or PDF files) +- please do not disclose publicly until we have had sufficient time to resolve the issue + +This security address should be used only for undisclosed vulnerabilities. Dealing with fixed issues or general questions on how to use Security Onion should be handled via the normal support channels.