About security update policy

[minty99]

I'm trying to add support for previous versions of onnxruntime in brew: Homebrew/homebrew-core#115298

The maintainers wants to know security update policy of onnxruntime project.

Upstream should have a release branch for each formula version, and have an explicit policy of releasing security updates for each version when necessary.

Does ORT project have explicit policy for security updates?

[snnn]

It is listed at https://github.com/microsoft/onnxruntime/blob/main/SECURITY.md

And we only patch the last release.