There is a new pull request by paper42 against master on the void-packages repository https://github.com/paper42/void-packages mc-27 https://github.com/void-linux/void-packages/pull/34697 mc: update to 4.8.27. #### Testing the changes - I tested the changes in this PR: **YES** fixes CVE-2021-36370: > sftpfs vfs: CVE-2021-36370: server fingerprint isn't verified A patch file from https://github.com/void-linux/void-packages/pull/34697.patch is attached