Security Issue Report

[mmajchr]

Is there an existing issue for this?

• I have searched the existing issues

Midnight Commander version and build configuration

Hello mc maintainers.
How can I safely report a security issue in mc?
I don't want to reveal sensitive info in public GitHub issue.
Regards.

Operating system

Linux

Is this issue reproducible using the latest version of Midnight Commander?

• I confirm the issue is still reproducible with the latest version of Midnight Commander

How to reproduce

.

Expected behavior

Some info on website or SECURITY.md on GitHub.

Actual behavior

No SECURITY.md

Additional context

No response

[zyv]

You can report privately to the current maintainers:

https://midnight-commander.org/maintainers/#current-team

[zyv]

Our severity assessment: a practically non-exploitable crash when entering crafted CPIO archives, that is, local DoS.