We provide security updates for the following versions:

• Supported: Security fixes and critical bug fixes are backported.
• Unsupported: No new fixes; please upgrade to a supported version.

• Stopping support: When a version line reaches end of life, we will announce it in the release notes and this document. After EOL, that version will not receive security or bug fixes.
• Upgrade: We recommend staying on a supported version and upgrading before your current version goes out of support.

If you discover a security issue, please report it responsibly:

1. Private disclosure (preferred)
   Open a private security advisory on GitHub: Security Advisories.
   This allows us to fix the issue and coordinate disclosure before it is made public.

2. Public disclosure
   You may open a public issue if you prefer; please avoid including proof-of-concept or exploit details that could put others at risk before a fix is available.

We will acknowledge your report and work with you on a fix and disclosure timeline. Thank you for helping keep apt-proxy and its users safe.