Currently, these versions are supported with security updates:

* The libraries lower than version 3 are still available for security support. However, minor security flaws or functional improvements may be rejected in favor of upgrading.

Reporting a security vulnerability is done via filing a security bug report, please provide us with as much details as you can.

Your report will be reviewed and you can expect a detailed explanation stating how we'll address the situation.
We will provide a reason if we decide to ignore/not pick up this vulnerability, or if it's not applicable.