| 21 May 2025 |
Zhaofeng Li | libarchive: https://github.com/NixOS/nixpkgs/pull/409300
https://github.com/libarchive/libarchive/releases/tag/v3.8.0
Security fixes mixed with new features, no CVEs assigned as far as I can tell | 06:46:07 |
stigo | I've pinged Red Hat about it, hopefully they will get CVEs fixed | 10:26:12 |
stigo | (MITRE takes ages to repond) | 10:28:23 |
| oddlama changed their display name from Malte to oddlama. | 17:42:18 |
hexa | https://github.com/NixOS/nixpkgs/pull/409445 | 23:56:59 |
| 23 May 2025 |
stigo | Red Hat CNA-LR responded yesterday that they will process the issues | 11:04:13 |
Markus Theil | https://openssl-library.org/news/vulnerabilities/#CVE-2025-4575 | 13:18:08 |
Markus Theil | I commented the CVE in https://github.com/NixOS/nixpkgs/pull/397123. | 13:19:24 |