bigbluebutton-Github/SECURITY.md

# Security Policy

## Supported Versions

We actively support BigBlueButton through the community forums and through security updates.

| Version | Supported          |
| ------- | ------------------ |
| 2.4.x (or earlier)  | :x:    |
| 2.5.x   | :white_check_mark: |
| 2.6.x   | :white_check_mark: |
| 2.7.x   | :x: |

We have released 2.6 to the community and are going to support both 2.5 and 2.6 together for the coming months (while we're actively developing the next release).  Also, BigBlueButton 2.4 is now end of life.

As such, we recommend that all administrators deploy 2.6 going forward.  You'll find [many improvements](https://docs.bigbluebutton.org/2.6/new.html) in this newer version.

## Reporting a Vulnerability

If you believe you have found a security vunerability in BigBlueButton please let us know directly by 
- using GitHub's "Report a vulnerability" functionality on https://github.com/bigbluebutton/bigbluebutton/security/advisories
- or e-mailing security@bigbluebutton.org with as much detail as possible.

Regards,... [BigBlueButton Team](https://docs.bigbluebutton.org/support/faq.html#bigbluebutton-committer)
-												Create SECURITY.md
											
										
										
											2020-07-23 08:30:51 +08:00
+								# Security Policy
 								## Supported Versions
 								We actively support BigBlueButton through the community forums and through security updates.
 								| Version | Supported          |
 								| ------- | ------------------ |
-												chore: Update SECURITY.md for BBB 2.6 (#17117)


											
										
										
											2023-03-21 05:35:25 +08:00
+								| 2.4.x (or earlier)  | :x:    |
-												chore: set 2.5 as the recommended version, discontinue 2.3
											
										
										
											2022-06-15 22:10:27 +08:00
+								| 2.5.x   | :white_check_mark: |
-												chore: Update SECURITY.md for BBB 2.6 (#17117)


											
										
										
											2023-03-21 05:35:25 +08:00
+								| 2.6.x   | :white_check_mark: |
 								| 2.7.x   | :x: |
-												Create SECURITY.md
											
										
										
											2020-07-23 08:30:51 +08:00
-												chore: Update SECURITY.md for BBB 2.6 (#17117)


											
										
										
											2023-03-21 05:35:25 +08:00
+								We have released 2.6 to the community and are going to support both 2.5 and 2.6 together for the coming months (while we're actively developing the next release).  Also, BigBlueButton 2.4 is now end of life.
-												Update SECURITY.md
											
										
										
											2021-05-11 01:10:15 +08:00
-												chore: Update SECURITY.md for BBB 2.6 (#17117)


											
										
										
											2023-03-21 05:35:25 +08:00
+								As such, we recommend that all administrators deploy 2.6 going forward.  You'll find [many improvements](https://docs.bigbluebutton.org/2.6/new.html) in this newer version.
-												Update SECURITY.md
											
										
										
											2021-05-11 01:10:15 +08:00
-												Create SECURITY.md
											
										
										
											2020-07-23 08:30:51 +08:00
+								## Reporting a Vulnerability
-												chore: Update SECURITY.md for BBB 2.6 (#17117)


											
										
										
											2023-03-21 05:35:25 +08:00
+								If you believe you have found a security vunerability in BigBlueButton please let us know directly by
 								- using GitHub's "Report a vulnerability" functionality on https://github.com/bigbluebutton/bigbluebutton/security/advisories
 								- or e-mailing security@bigbluebutton.org with as much detail as possible.
-												Create SECURITY.md
											
										
										
											2020-07-23 08:30:51 +08:00
 								Regards,... [BigBlueButton Team](https://docs.bigbluebutton.org/support/faq.html#bigbluebutton-committer)