Skip to content

Commit ff02e7f

Browse files
localai-botlocalai-botmudler
authored
docs: clarify SECURITY.md version support table with specific ranges and EOL dates (mudler#8861)
* docs: clarify SECURITY.md version support table with specific ranges and EOL dates - Add detailed version support table with 3.x (actively supported), 2.x (security fixes until Dec 31, 2026), and 1.x (EOL since Jan 1, 2024) - Define what each support level means for users - Add migration guidance for users on older versions - Replace vague version ranges with specific, actionable information Signed-off-by: localai-bot <localai-bot@noreply.github.com> * Apply suggestions from code review Signed-off-by: Ettore Di Giacinto <mudler@users.noreply.github.com> --------- Signed-off-by: localai-bot <localai-bot@noreply.github.com> Signed-off-by: Ettore Di Giacinto <mudler@users.noreply.github.com> Co-authored-by: localai-bot <localai-bot@noreply.github.com> Co-authored-by: Ettore Di Giacinto <mudler@users.noreply.github.com>
1 parent 85e4871 commit ff02e7f

1 file changed

Lines changed: 18 additions & 4 deletions

File tree

SECURITY.md

Lines changed: 18 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -8,10 +8,24 @@ At LocalAI, we take the security of our software seriously. We understand the im
88

99
We provide support and updates for certain versions of our software. The following table outlines which versions are currently supported with security updates:
1010

11-
| Version | Supported |
12-
| ------- | ------------------ |
13-
| > 2.0 | :white_check_mark: |
14-
| < 2.0 | :x: |
11+
| Version Series | Support Level | Details |
12+
| -------------- | ------------- | ------- |
13+
| 3.x | :white_check_mark: Actively supported | Full security updates and bug fixes for the latest minor versions. |
14+
| 2.x | :warning: Security fixes only | Critical security patches only, until **December 31, 2025**. |
15+
| 1.x | :x: End-of-life (EOL) | No longer supported as of **January 1, 2024**. No security fixes will be provided. |
16+
17+
### What each support level means
18+
19+
- **Actively supported (3.x):** Receives all security updates, bug fixes, and new features. Users should stay on the latest 3.x minor release for the best protection.
20+
- **Security fixes only (2.x):** Receives only critical security patches (e.g., remote code execution, authentication bypass, data exposure). No bug fixes or new features. Support ends December 31, 2025.
21+
- **End-of-life (1.x):** No updates of any kind. Users on 1.x are strongly encouraged to upgrade immediately, as known vulnerabilities will not be patched.
22+
23+
### Migrating from older versions
24+
25+
If you are running an unsupported or soon-to-be-unsupported version, we recommend upgrading as soon as possible:
26+
27+
- **From 1.x to 3.x:** Version 1.x reached end-of-life on January 1, 2024. Review the [release notes](https://github.com/mudler/LocalAI/releases) for breaking changes across major versions, and upgrade directly to the latest 3.x release.
28+
- **From 2.x to 3.x:** While 2.x still receives critical security patches until December 31, 2025, we recommend planning your migration to 3.x to benefit from ongoing improvements and full support.
1529

1630
Please ensure that you are using a supported version to receive the latest security updates.
1731

0 commit comments

Comments
 (0)