There's a merged pull request on the void-packages repository mc: update to 4.8.27. https://github.com/void-linux/void-packages/pull/34697 Description: #### Testing the changes - I tested the changes in this PR: **YES** fixes CVE-2021-36370: > sftpfs vfs: CVE-2021-36370: server fingerprint isn't verified