Re: Security issue.

Michał Majchrowicz <[email protected]> Sun, 5 Apr 2026 14:11:46 +0200

Newsgroups	gmane.editors.nano.devel
Message-ID	<[email protected]>

Hello Benno,
Yes it looks previous reporter use similar tools. Sorry for not checking with git version but I thought 5.7 was pretty recent and pretty recently I didn’t know that gnu projects have git repos on savannah. I verify all my findings manually as you are probably aware AI tools are pretty unreliable and generate tons of false positives. I will verify rest of my findings with recent git and will get back to you if anything interesting comes. Once again sorry for false report and thanks for your help.
Regards,
—
Michał Majchrowicz / Offensive Security Engineer / PhD eWPTX
PGP: D52A 5289 8256 006D 5E05 BAC6 79EA 0072 F4E1 9D57

AFINE sp. z o.o.
Al. Jerozolimskie 146C, 02-305 Warszawa
https://www.afine.com <https://www.afine.com/>

> Wiadomość napisana przez Benno Schulenberg <[email protected]> w dniu 5 kwi 2026, o godz. 12:20:
> 
> 
> Op 03-04-2026 om 10:38 schreef Michał Majchrowicz:
>> Where can I safely report security issue in nano?
> The report turned out to be basically equivalent to the one from six
> days ago:
> 
>  https://lists.gnu.org/archive/html/nano-devel/2026-03/msg00027.html
> 
> Judging from their verbosity and overmeticulous structure, both were
> generated with AI.  It's nice that people scrutinize nano with the help
> of AI, but please always verify your findings against the latest state
> of the master branch in git.
> 
> 
> Benno
>

signature.asc (application/pgp-signature, 833 B)