Skip to content
Snippets Groups Projects
Toolybird's avatar
closed issue #1 "[minizip] v1.3.1-2 incorrectly marked as vulnerable to CVE-2023-45853" at Arch Linux / Packaging / Packages / zlib
Toolybird's avatar
commented on issue #1 "[minizip] v1.3.1-2 incorrectly marked as vulnerable to CVE-2023-45853" at Arch Linux / Packaging / Packages / zlib

Thanks for the response.. and for taking care of it 😄

Remi Gacogne's avatar
commented on issue #1 "[minizip] v1.3.1-2 incorrectly marked as vulnerable to CVE-2023-45853" at Arch Linux / Packaging / Packages / zlib

I updated it the AVG, should be good now. https://security.archlinux.org/ is unfortunately not updated these days, we have plans to automate a fair...

Toolybird's avatar
commented on issue #1 "[minizip] v1.3.1-2 incorrectly marked as vulnerable to CVE-2023-45853" at Arch Linux / Packaging / Packages / zlib

Umm, this is not really a packaging issue.. It seems to be an oversight by the "Arch Security Team". Who actually maintains https://security.archli...

Guilherme's avatar
opened issue #1 "[minizip] v1.3.1-2 incorrectly marked as vulnerable to CVE-2023-45853" at Arch Linux / Packaging / Packages / zlib
Leonidas Spyropoulos's avatar
Leonidas Spyropoulos's avatar
Levente Polyak's avatar
Levente Polyak's avatar
Levente Polyak's avatar
Levente Polyak's avatar
Levente Polyak's avatar
closed merge request !2 "backport fix for CVE-2023-45853" at Arch Linux / Packaging / Packages / zlib
Levente Polyak's avatar
commented on merge request !2 "backport fix for CVE-2023-45853" at Arch Linux / Packaging / Packages / zlib

Applied via a79dba90...

T.J. Townsend's avatar
opened merge request !2 "backport fix for CVE-2023-45853" at Arch Linux / Packaging / Packages / zlib
David Runge's avatar
David Runge's avatar
David Runge's avatar
Leonidas Spyropoulos's avatar
  • 00d2974a · upgpkg: 1:1.2.13-3: rebuild to add provides
Leonidas Spyropoulos's avatar
deleted branch add-provides at Arch Linux / Packaging / Packages / zlib