| 10 Mar 2025 |
AkechiShiro | Hey just a quick update, I did reach out to him regarding the CVE, he did confirm that versions in Nixpkgs are vulnerable,
I also saw that some builds fixes are waiting to get build : https://github.com/NixOS/nixpkgs/pull/387730
OfBorg can't build the package, I guess the version bump would come after this PR which fixes some builds | 15:24:54 |
| @joey:jdigi.net left the room. | 15:42:22 |
emily | (he's the sole listed maintainer for LibreOffice, does he plan to handle the CVEs?) | 15:59:50 |
hexa | exactly my question | 16:12:18 |
| Gaƫl joined the room. | 22:08:06 |
AkechiShiro | Sorry for the delay, he plans to handle the CVE but he's unsure when he can do it | 22:14:26 |
| 11 Mar 2025 |
| @3wy-kra:matrix.uni-hannover.de joined the room. | 16:59:37 |
| 12 Mar 2025 |
| paq joined the room. | 09:25:20 |
hexa | https://security.opensuse.org/2025/03/12/below-world-writable-log-dir.html | 15:30:08 |
hexa |
Upstream released a bugfix in version v0.9.0 and a security advisory on GitHub.
| 15:30:22 |
hexa | globin: | 15:30:29 |
hexa | * globin please | 15:30:33 |