Security fixes are made for the latest release of StarMAC only. Please update to the newest version before reporting a problem.

Please do not open a public issue for security problems.

Report them privately through GitHub instead: Report a vulnerability. Reports in English or German are welcome.

Helpful details:

• StarMAC version, operating system and installation method
• STARFACE version, if relevant
• What an attacker could do, and the steps to reproduce it

You will get an answer as soon as possible. Once a fix is released, the advisory is published and you are credited, unless you prefer not to be.

In scope is the StarMAC code in this repository and the packages built from it (the macOS disk images under Releases).

Vulnerabilities in the STARFACE phone system itself should be reported to STARFACE GmbH.