About security issues

[the-Chain-Warden-thresh]

According to SECURITY.md, suspected security vulnerabilities can be discussed via [email protected]. I've found some suspected security vulnerabilities, and send email about them several month ago. Unfortunately I haven't received any reply yet, is there a new email address to handle suspected security vulnerabilities? Or I just need to wait a little bit longer for the reply.

[jlinktu]

If you are referring to tcpdump and boringssl, then we received your mail. Simply forgot to answer. Thank you for making us aware of this, at some point we'll update those.

[the-Chain-Warden-thresh]

If you are referring to tcpdump and boringssl, then we received your mail. Simply forgot to answer. Thank you for making us aware of this, at some point we'll update those.

Thank you for your confirmation! By the way, wireshark in this repo is also vulnerable to some security issue, and my merge request was accepted by wireshark. I believe it's necessary to update wireshark together with tcpdump and boringssl.