Fixes for security vulnerabilities are made to master and latest major release, and on a case-by-case for other maintained versions.
Please report (suspected) security vulnerabilities to [email protected].
Security critical GitHub issues (for example anything leading to a segfault)
can be tagged security.