# Security Policy

## Supported Versions

The first stable release of Apache Ozone is 1.0, the previous alpha and beta releases are not supported by the community.

| Version       | Supported          |
| ------------- | ------------------ |
| 0.3.0 (alpha) | :x:                |
| 0.4.0 (alpha) | :x:                |
| 0.4.1 (alpha) | :x:                |
| 0.5.0 (beta)  | :x:                |
| 1.0           | :white_check_mark: |
| 1.1           | :white_check_mark: |

## Reporting a Vulnerability

To report any found security issues or vulnerabilities, please send a mail to security@ozone.apache.org, so that they may be investigated and fixed before the vulnerabilities is published.

This email address is a private mailing list for discussion of potential security vulnerabilities issues.

This mailing list is **NOT** for end-user questions and discussion on security. Please use the dev@ozone.apache.org list for such issues.

In order to post to the list, it is **NOT** necessary to first subscribe to it.
