Files
ink-notes/SECURITY.md
T
haraldandClaude Opus 5.5 7cf315967a docs: Dokumentation auf Englisch, deutsche Fassungen als *.de.md
CONTRIBUTING, SECURITY, docs/ARCHITECTURE und docs/FILE_FORMAT sind jetzt englisch; die
deutschen Fassungen bleiben als *.de.md erhalten und verlinken sich gegenseitig. Inhaltlich
nachgezogen: Live-Strich mit gleicher Tessellierung, runde Ecken, Nachgleiten, eingerasteter
Textmarker, Farben im Dateiformat sind sRGB. Kommentare im Flatpak-Manifest auf Englisch.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-20 21:12:56 +02:00

1.2 KiB
Raw Blame History

Security Policy

English · Deutsch

Supported versions

Security fixes are only provided for the latest release (see Releases). The app offers updates itself (☰ → Updates); the Flatpak is updated through the software manager.

Reporting a vulnerability

Please do not report vulnerabilities in a public issue. Send an e-mail to harald@pansi.eu instead, ideally with:

  • the affected version and installation type (.deb, AppImage, Flatpak, built from source),
  • a description of what can happen,
  • steps or a file (e.g. a crafted notebook or PDF) to reproduce it.

You will get an answer within a week. Confirmed issues are fixed in a new release; on request you will be credited in the release notes. Reports in English or German are both fine.

Areas of interest

  • Updates: verification of the Minisign signature and SHA-256 checksums, downloading and replacing packages (see "Update security" in the README).
  • Opening files: imported PDFs and images, notebook files (file format) – e.g. crashes or writes outside the data folder caused by crafted files.