At the moment, Avogadro2 is in beta release. As such, we can most easily support security updates on the most recent release and current nightly snapshots. We will work with distributions (e.g., Ubuntu, FreeBSD, etc.) to provide security patches for widely used long-term-support OS.

We currently support private security vulnerability reporting through our GitHub pages. We will work to verify the security vulnerability within 14 days and a patch or new release within 30 days of reporting.