Clarify some language in SECURITY.md

This commit is contained in:
Jesse Talavera 2024-10-18 17:49:55 -04:00
parent 8b1404585a
commit ca26d1fd8c
2 changed files with 4 additions and 1 deletions

4
.github/SECURITY.md vendored
View File

@ -10,10 +10,12 @@ _security fixes will not be backported to older releases_.
melonDS DS is only intended to execute code for the hardware it emulates;
any bug that allows it to execute arbitrary code on the host
is a vulnerability and should be reported.
Reports of other kinds of vulnerabilities
(e.g. build infrastructure) are also welcome.
If you discover such a bug, please submit a private vulnerability report
(**not** a public bug)
with a homebrew ROM that demonstrates the issue.
with a homebrew ROM that demonstrates the issue if applicable.
I will share this information with the maintainers of upstream melonDS,
as such a vulnerability would most likely affect them as well.

View File

@ -20,6 +20,7 @@ Thanks to **@oddballparty** and a private sponsor for their generosity!
starting with this release.
- Added a contributor's guide at `CONTRIBUTING.md`.
[#107](https://github.com/JesseTG/melonds-ds/issues/107)
- Added guidelines for reporting security vulnerabilities at `SECURITY.md`.
- Added right-handed versions of the hybrid screen layouts.
[#38](https://github.com/JesseTG/melonds-ds/issues/38)
**Thanks for [#229](https://github.com/JesseTG/melonds-ds/pull/229), @roblar91!**