| 20 May 2025 |
emily | (fixed aliases merge conflict 🙃) | 13:24:32 |
hexa | https://www.openwall.com/lists/oss-security/2025/05/20/2 openvpn | 15:30:00 |
hexa |
All versions from v20 through v24 are affected. This has been resolved in OpenVPN 3 Linux v24.1.
| 15:30:15 |
hexa | nix-repl> :p openvpn3.version
24
| 15:30:30 |
tgerbet | https://github.com/NixOS/nixpkgs/pull/409119 | 16:37:41 |
| 21 May 2025 |
Zhaofeng Li | libarchive: https://github.com/NixOS/nixpkgs/pull/409300
https://github.com/libarchive/libarchive/releases/tag/v3.8.0
Security fixes mixed with new features, no CVEs assigned as far as I can tell | 06:46:07 |
stigo | I've pinged Red Hat about it, hopefully they will get CVEs fixed | 10:26:12 |
stigo | (MITRE takes ages to repond) | 10:28:23 |
| oddlama changed their display name from Malte to oddlama. | 17:42:18 |
hexa | https://github.com/NixOS/nixpkgs/pull/409445 | 23:56:59 |
| 23 May 2025 |
stigo | Red Hat CNA-LR responded yesterday that they will process the issues | 11:04:13 |
Markus Theil | https://openssl-library.org/news/vulnerabilities/#CVE-2025-4575 | 13:18:08 |
Markus Theil | I commented the CVE in https://github.com/NixOS/nixpkgs/pull/397123. | 13:19:24 |
| Alison Jenkins changed their profile picture. | 16:05:41 |
| 25 May 2025 |
hexa | https://www.openwall.com/lists/oss-security/2025/05/23/2 | 15:50:31 |