CONTRIBUTING, SECURITY, docs/ARCHITECTURE und docs/FILE_FORMAT sind jetzt englisch; die deutschen Fassungen bleiben als *.de.md erhalten und verlinken sich gegenseitig. Inhaltlich nachgezogen: Live-Strich mit gleicher Tessellierung, runde Ecken, Nachgleiten, eingerasteter Textmarker, Farben im Dateiformat sind sRGB. Kommentare im Flatpak-Manifest auf Englisch. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
1.2 KiB
1.2 KiB
Security Policy
English · Deutsch
Supported versions
Security fixes are only provided for the latest release (see Releases). The app offers updates itself (☰ → Updates); the Flatpak is updated through the software manager.
Reporting a vulnerability
Please do not report vulnerabilities in a public issue. Send an e-mail to harald@pansi.eu instead, ideally with:
- the affected version and installation type (.deb, AppImage, Flatpak, built from source),
- a description of what can happen,
- steps or a file (e.g. a crafted notebook or PDF) to reproduce it.
You will get an answer within a week. Confirmed issues are fixed in a new release; on request you will be credited in the release notes. Reports in English or German are both fine.
Areas of interest
- Updates: verification of the Minisign signature and SHA-256 checksums, downloading and replacing packages (see "Update security" in the README).
- Opening files: imported PDFs and images, notebook files (file format) – e.g. crashes or writes outside the data folder caused by crafted files.