Security Policy

Supported Versions

The first stable release of Apache Ozone is 1.0, the previous alpha and beta releases are not supported by the community.

VersionSupported
0.3.0 (alpha):x:
0.4.0 (alpha):x:
0.4.1 (alpha):x:
0.5.0 (beta):x:
1.0:white_check_mark:

Reporting a Vulnerability

To report any found security issues or vulnerabilities, please send a mail to security@ozone.apache.org, so that they may be investigated and fixed before the vulnerabilities is published.

This email address is a private mailing list for discussion of potential security vulnerabilities issues.

This mailing list is NOT for end-user questions and discussion on security. Please use the dev@ozone.apache.org list for such issues.

In order to post to the list, it is NOT necessary to first subscribe to it.