[Rpm-maint] [rpm-software-management/rpm] Eliminate the internal OpenPGP parser (Issue #1935)

Demi Marie Obenour notifications at github.com
Sun Feb 27 00:51:43 UTC 2022


> Targeted for RPM 4.19 in 2023, and this also means that no major developments to the existing parser should be done, from here on it's strictly in critical fixes only -mode.

I consider #1938 to be critical; there is likely a real-world attack based on it in certain scenarios.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/1935#issuecomment-1052872830
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/issues/1935/1052872830 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20220226/c32fe3c7/attachment.html>


More information about the Rpm-maint mailing list