bigbluebutton-Github/SECURITY.md

# Security Policy

## Supported Versions

We actively support BigBlueButton through the community forums and through security updates.

| Version | Supported          |
| ------- | ------------------ |
| 2.5.x (or earlier)  | :x:    |
| 2.6.x   | :white_check_mark: |
| 2.7.x   | :white_check_mark: |
| 3.0.x   | :x: |

We have released 2.7 to the community and are going to support both 2.6 and 2.7 together for the coming months (while we're actively developing the next release).  Also, BigBlueButton 2.5 is now end of life.

As such, we recommend that all administrators deploy 2.7 going forward.  You'll find [many improvements](https://docs.bigbluebutton.org/2.7/new-features) in this newer version.

## Reporting a Vulnerability

If you believe you have found a security vulnerability in BigBlueButton please let us know directly by
- using GitHub's "Report a vulnerability" functionality on https://github.com/bigbluebutton/bigbluebutton/security/advisories
- or e-mailing security@bigbluebutton.org with as much detail as possible.

Regards,... [BigBlueButton Team](https://docs.bigbluebutton.org/support/faq.html#bigbluebutton-committer)
-												Create SECURITY.md
											
										
										
											2020-07-23 08:30:51 +08:00
+								# Security Policy
 								## Supported Versions
 								We actively support BigBlueButton through the community forums and through security updates.
 								| Version | Supported          |
 								| ------- | ------------------ |
-												Update SECURITY.md
											
										
										
											2023-09-07 03:37:56 +08:00
+								| 2.5.x (or earlier)  | :x:    |
-												chore: Update SECURITY.md for BBB 2.6 (#17117)


											
										
										
											2023-03-21 05:35:25 +08:00
+								| 2.6.x   | :white_check_mark: |
-												Update SECURITY.md
											
										
										
											2023-09-07 03:37:56 +08:00
+								| 2.7.x   | :white_check_mark: |
-												chore: renaming BBB 2.8 to 3.0

											
										
										
											2023-09-26 23:41:25 +08:00
+								| 3.0.x   | :x: |
-												Create SECURITY.md
											
										
										
											2020-07-23 08:30:51 +08:00
-												Update SECURITY.md
											
										
										
											2023-09-07 03:37:56 +08:00
+								We have released 2.7 to the community and are going to support both 2.6 and 2.7 together for the coming months (while we're actively developing the next release).  Also, BigBlueButton 2.5 is now end of life.
-												Update SECURITY.md
											
										
										
											2021-05-11 01:10:15 +08:00
-												Update SECURITY.md
											
										
										
											2023-09-07 03:37:56 +08:00
+								As such, we recommend that all administrators deploy 2.7 going forward.  You'll find [many improvements](https://docs.bigbluebutton.org/2.7/new-features) in this newer version.
-												Update SECURITY.md
											
										
										
											2021-05-11 01:10:15 +08:00
-												Create SECURITY.md
											
										
										
											2020-07-23 08:30:51 +08:00
+								## Reporting a Vulnerability
-												chore: Fix typo (found by typos) (port) #19834

Co-authored-by: Stefan Weil <sw@weilnetz.de>
											
										
										
											2024-03-18 21:58:53 +08:00
+								If you believe you have found a security vulnerability in BigBlueButton please let us know directly by
-												chore: Update SECURITY.md for BBB 2.6 (#17117)


											
										
										
											2023-03-21 05:35:25 +08:00
+								- using GitHub's "Report a vulnerability" functionality on https://github.com/bigbluebutton/bigbluebutton/security/advisories
 								- or e-mailing security@bigbluebutton.org with as much detail as possible.
-												Create SECURITY.md
											
										
										
											2020-07-23 08:30:51 +08:00
 								Regards,... [BigBlueButton Team](https://docs.bigbluebutton.org/support/faq.html#bigbluebutton-committer)